UBUNTU-CVE-2019-14250

Details

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Affected Packages

libiberty

Ubuntu 16.04 LTS

Fixed in:

20160215-1ubuntu0.3

binutils

Ubuntu 18.04 LTS

Fixed in:

2.30-21ubuntu1~18.04.3

libiberty

Ubuntu 18.04 LTS

Fixed in:

20170913-1ubuntu0.1

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm1

References

REPORT

https://ubuntu.com/security/CVE-2019-14250

ADVISORY

https://ubuntu.com/security/notices/USN-4326-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-14250