UBUNTU-CVE-2021-45078

HIGH7.8

Published Dec 15, 2021

Modified 3 months ago

Fix available

Details

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

Affected Packages

binutils

Ubuntu 20.04 LTS

Fixed in:

2.34-6ubuntu1.6

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm3

binutils

Ubuntu Pro 18.04 LTS

Affected versions:

2.29.1-10ubuntu12.29.1-12ubuntu12.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu1+20 more

References

REPORT

https://ubuntu.com/security/CVE-2021-45078

ADVISORY

https://ubuntu.com/security/notices/USN-5341-1

ADVISORY

https://ubuntu.com/security/notices/USN-6160-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2021-45078

CVSS Analysis

CVSS v3.1

Exploitability