UBUNTU-CVE-2014-9939

Details

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objects.

Affected Packages

gdb

Ubuntu 14.04 LTS

Fixed in:

7.7.1-0ubuntu5~14.04.3

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

References

REPORT

http://www.openwall.com/lists/oss-security/2015/07/31/6

REPORT

https://ubuntu.com/security/CVE-2014-9939

ADVISORY

https://ubuntu.com/security/notices/USN-3367-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2014-9939