CVE-2019-9077: Buffer Overflow
First published: Sun Feb 24 2019(Updated: )
An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS option section.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Binutils | =2.32 | |
| Netapp Element Software | ||
| Canonical Ubuntu Linux | =18.04 | |
| F5 Traffix Signaling Delivery Controller | >=5.0.0<=5.1.0 | |
| debian/binutils | 2.35.2-2 2.40-2 2.43.1-5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/107139
- https://security.netapp.com/advisory/ntap-20190314-0003/
- https://support.f5.com/csp/article/K00056379
- https://sourceware.org/bugzilla/show_bug.cgi?id=24243
- https://usn.ubuntu.com/4336-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html
- https://security.gentoo.org/glsa/202107-24
- https://launchpad.net/bugs/cve/CVE-2019-9077
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=7fc0c668f2aceb8582d74db1ad2528e2bba8a921
- https://security-tracker.debian.org/tracker/CVE-2019-9077
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9077
- https://nvd.nist.gov/vuln/detail/CVE-2019-9077
- https://ubuntu.com/security/CVE-2019-9077
Frequently Asked Questions
What is CVE-2019-9077?
CVE-2019-9077 is a vulnerability in GNU Binutils 2.32 that allows for a heap-based buffer overflow in the readelf.c file.
Which software is affected by CVE-2019-9077?
CVE-2019-9077 affects GNU Binutils 2.32, Netapp Element Software, Canonical Ubuntu Linux 18.04, F5 Traffix Signaling Delivery Controller (version 5.0.0 to 5.1.0), Apple High Sierra, and certain versions of Debian Binutils.
What is the severity of CVE-2019-9077?
CVE-2019-9077 has a severity rating of 7.8 (high).
How can I fix CVE-2019-9077 in GNU Binutils?
To fix CVE-2019-9077 in GNU Binutils, you should update to a version higher than 2.35.2-2, 2.40-2, or 2.41-5.
Are there any additional references related to CVE-2019-9077?
Yes, you can find more information about CVE-2019-9077 at the following links: http://www.securityfocus.com/bid/107139, https://security.netapp.com/advisory/ntap-20190314-0003/, and https://support.f5.com/csp/article/K00056379.
- agent/type
- collector/launchpad-cve
- source/Launchpad
- agent/first-publish-date
- agent/author
- agent/weakness
- agent/severity
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/usn-cve
- source/Ubuntu
- collector/security-tracker-debian
- source/Debian
- agent/remedy
- agent/references
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- vendor/gnu
- canonical/gnu binutils
- version/gnu binutils/2.32
- vendor/netapp
- canonical/netapp element software
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/18.04
- vendor/f5
- canonical/f5 traffix signaling delivery controller
- version/f5 traffix signaling delivery controller/5.0.0
- version/f5 traffix signaling delivery controller/5.1.0
- package-manager/debian