CVE-2019-9077: Buffer Overflow
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in processmipsspecific in readelf.c via a malformed MIPS option section.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-9077?
CVE-2019-9077 is a vulnerability in GNU Binutils 2.32 that allows for a heap-based buffer overflow in the readelf.c file.
Which software is affected by CVE-2019-9077?
CVE-2019-9077 affects GNU Binutils 2.32, Netapp Element Software, Canonical Ubuntu Linux 18.04, F5 Traffix Signaling Delivery Controller (version 5.0.0 to 5.1.0), Apple High Sierra, and certain versions of Debian Binutils.
What is the severity of CVE-2019-9077?
CVE-2019-9077 has a severity rating of 7.8 (high).
How can I fix CVE-2019-9077 in GNU Binutils?
To fix CVE-2019-9077 in GNU Binutils, you should update to a version higher than 2.35.2-2, 2.40-2, or 2.41-5.
Are there any additional references related to CVE-2019-9077?
Yes, you can find more information about CVE-2019-9077 at the following links: http://www.securityfocus.com/bid/107139, https://security.netapp.com/advisory/ntap-20190314-0003/, and https://support.f5.com/csp/article/K00056379.