USN-6544-1: GNU binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain COFF files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533) It was discovered that GNU binutils was not properly performing bounds checks in several functions, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service, expose sensitive information or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-4285, CVE-2020-19726, CVE-2021-46174) It was discovered that GNU binutils contained a reachable assertion, which could lead to an intentional assertion failure when processing certain crafted DWARF files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-35205)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-6544-1?
The USN-6544-1 vulnerability is considered serious as it could allow an attacker to cause a crash or execute arbitrary code.
How do I fix USN-6544-1?
To fix USN-6544-1, upgrade the affected packages to their latest versions: binutils and binutils-multiarch for your Ubuntu release.
Which versions of Ubuntu are affected by USN-6544-1?
USN-6544-1 affects Ubuntu 14.04 LTS, 20.04 LTS, and 22.04 LTS for specific versions of the binutils package.
What packages are involved in USN-6544-1?
The vulnerable packages involved in USN-6544-1 are binutils and binutils-multiarch.
Can exploitation of USN-6544-1 be mitigated?
Mitigation of USN-6544-1 involves ensuring that the affected binutils packages are updated to secure versions.