CVE-2019-9075: Buffer Overflow
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in bfdarchive64bitslurparmap in archive64.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the severity of CVE-2019-9075?
The severity of CVE-2019-9075 is high.
What is the affected software for CVE-2019-9075?
The affected software for CVE-2019-9075 is GNU Binutils version 2.32.
How can I fix CVE-2019-9075?
To fix CVE-2019-9075, update to version 2.35.2-2, 2.40-2, or 2.41-5 of the binutils package.
Where can I find more information about CVE-2019-9075?
More information about CVE-2019-9075 can be found on the following sites: [link1](https://security.netapp.com/advisory/ntap-20190314-0003/), [link2](https://support.f5.com/csp/article/K42059040), [link3](https://sourceware.org/bugzilla/show_bug.cgi?id=24236).
What is the Common Weakness Enumeration (CWE) ID for CVE-2019-9075?
The Common Weakness Enumeration (CWE) ID for CVE-2019-9075 is 119.