CVE-2019-9075: Buffer Overflow
Published Feb 24, 2019
·Updated
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c.
Affected Software
31 affected componentsFixes available
GNU binutils=2.32
NetApp Hci Management Node
NetApp Solidfire
Canonical Ubuntu Linux=18.04
F5 BIG-IP Access Policy Manager=14.1.0
F5 BIG-IP Access Policy Manager=15.0.0
F5 BIG-IP Advanced Firewall Manager=14.1.0
F5 BIG-IP Advanced Firewall Manager=15.0.0
F5 BIG-IP Analytics=14.1.0
F5 BIG-IP Analytics=15.0.0
F5 Big-ip Application Acceleration Manager=14.1.0
F5 Big-ip Application Acceleration Manager=15.0.0
F5 BIG-IP Application Security Manager=14.1.0
F5 BIG-IP Application Security Manager=15.0.0
F5 Big-ip Domain Name System=14.1.0
F5 Big-ip Domain Name System=15.0.0
F5 BIG-IP Edge Gateway=14.1.0
F5 BIG-IP Edge Gateway=15.0.0
F5 Big-ip Fraud Protection Service=14.1.0
F5 Big-ip Fraud Protection Service=15.0.0
F5 Big-ip Global Traffic Manager=14.1.0
F5 Big-ip Global Traffic Manager=15.0.0
F5 Big-ip Link Controller=14.1.0
F5 Big-ip Link Controller=15.0.0
F5 Big-ip Local Traffic Manager=14.1.0
F5 Big-ip Local Traffic Manager=15.0.0
F5 Big-ip Policy Enforcement Manager=14.1.0
F5 Big-ip Policy Enforcement Manager=15.0.0
F5 Big-ip Policy Webaccelerator=14.1.0
F5 Big-ip Webaccelerator=15.0.0
debian/binutils
2.35.2-22.40-22.44-3
Remediation
Patch Available
Event History
Feb 24, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·11:32 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:17 AM
RemedyDescriptionSeverityAffected Software
Feb 27, 2025
Data Sourced
via Debian·04:02 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-9075?
The severity of CVE-2019-9075 is high.
2
What is the affected software for CVE-2019-9075?
The affected software for CVE-2019-9075 is GNU Binutils version 2.32.
3
How can I fix CVE-2019-9075?
To fix CVE-2019-9075, update to version 2.35.2-2, 2.40-2, or 2.41-5 of the binutils package.
4
Where can I find more information about CVE-2019-9075?
More information about CVE-2019-9075 can be found on the following sites: [link1](https://security.netapp.com/advisory/ntap-20190314-0003/), [link2](https://support.f5.com/csp/article/K42059040), [link3](https://sourceware.org/bugzilla/show_bug.cgi?id=24236).
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-9075?
The Common Weakness Enumeration (CWE) ID for CVE-2019-9075 is 119.