Action not permitted
Modal body text goes here.
Modal Title
Modal Body
ubuntu-cve-2018-10535
Vulnerability from osv_ubuntu
Published
2018-04-29 15:29
Modified
2026-04-22 07:38
Summary
Details
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
Severity
5.5 (Medium)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.24-5ubuntu14.2+esm8"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.24-5ubuntu14.2+esm8"
},
{
"binary_name": "binutils-source",
"binary_version": "2.24-5ubuntu14.2+esm8"
},
{
"binary_name": "binutils-static",
"binary_version": "2.24-5ubuntu14.2+esm8"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:14.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.23.52.20130913-0ubuntu1",
"2.23.90.20131017-1ubuntu1",
"2.23.90.20131116-1ubuntu1",
"2.23.91.20131123-1ubuntu1",
"2.24-1ubuntu1",
"2.24-1ubuntu2",
"2.24-2ubuntu1",
"2.24-2ubuntu2",
"2.24-2ubuntu3",
"2.24-4ubuntu1",
"2.24-5ubuntu1",
"2.24-5ubuntu2",
"2.24-5ubuntu3",
"2.24-5ubuntu3.1",
"2.24-5ubuntu13",
"2.24-5ubuntu14",
"2.24-5ubuntu14.1",
"2.24-5ubuntu14.2",
"2.24-5ubuntu14.2+esm1",
"2.24-5ubuntu14.2+esm2",
"2.24-5ubuntu14.2+esm3",
"2.24-5ubuntu14.2+esm5",
"2.24-5ubuntu14.2+esm6",
"2.24-5ubuntu14.2+esm7",
"2.24-5ubuntu14.2+esm8"
]
},
{
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-source",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.25.1-6ubuntu1",
"2.25.51.20151022-0ubuntu2",
"2.25.51.20151022-0ubuntu3",
"2.25.51.20151027-0ubuntu1",
"2.25.51.20151028-0ubuntu1",
"2.25.51.20151106-0ubuntu1",
"2.25.51.20151113-1ubuntu1",
"2.25.51.20151113-2ubuntu1",
"2.25.90.20151125-1ubuntu1",
"2.25.90.20151125-2ubuntu1",
"2.25.90.20151211-0ubuntu1",
"2.25.90.20151211-0ubuntu2",
"2.25.90.20160101-1ubuntu1",
"2.25.90.20160101-1ubuntu2",
"2.26-2ubuntu1",
"2.26-3ubuntu1",
"2.26-4ubuntu1",
"2.26-5ubuntu1",
"2.26-6ubuntu1",
"2.26-7ubuntu2",
"2.26-8ubuntu1",
"2.26-8ubuntu2",
"2.26-8ubuntu2.1",
"2.26.1-1ubuntu1~16.04",
"2.26.1-1ubuntu1~16.04.1",
"2.26.1-1ubuntu1~16.04.3",
"2.26.1-1ubuntu1~16.04.4",
"2.26.1-1ubuntu1~16.04.5",
"2.26.1-1ubuntu1~16.04.6",
"2.26.1-1ubuntu1~16.04.7",
"2.26.1-1ubuntu1~16.04.8"
]
},
{
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-common",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-for-build",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-for-host",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-ia64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa32r6-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa32r6el-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-riscv64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-source",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-linux-gnux32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "libbinutils",
"binary_version": "2.30-21ubuntu1~18.04.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.30-21ubuntu1~18.04.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.29.1-4ubuntu1",
"2.29.1-6ubuntu1",
"2.29.1-7ubuntu1",
"2.29.1-8ubuntu1",
"2.29.1-10ubuntu1",
"2.29.1-12ubuntu1",
"2.30-4ubuntu1",
"2.30-5ubuntu1",
"2.30-7ubuntu1",
"2.30-8ubuntu1",
"2.30-9ubuntu1",
"2.30-10ubuntu1",
"2.30-11ubuntu1",
"2.30-14ubuntu2",
"2.30-15ubuntu1",
"2.30-20ubuntu2~18.04",
"2.30-21ubuntu1~18.04",
"2.30-21ubuntu1~18.04.1",
"2.30-21ubuntu1~18.04.2"
]
}
],
"aliases": [],
"details": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.",
"id": "UBUNTU-CVE-2018-10535",
"modified": "2026-04-22T07:38:36Z",
"published": "2018-04-29T15:29:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10535"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4336-1"
},
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4336-2"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2018-10535"
}
],
"related": [
"USN-4336-1",
"USN-4336-2"
],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2018-10535"
]
}
CVE-2018-10535 (GCVE-0-2018-10535)
Vulnerability from cvelistv5 – Published: 2018-04-29 15:00 – Updated: 2024-08-05 07:39
VLAI
EPSS
VEX
Summary
The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://access.redhat.com/errata/RHSA-2018:3032 | vendor-advisoryx_refsource_REDHAT |
| https://sourceware.org/bugzilla/show_bug.cgi?id=23113 | x_refsource_MISC |
| http://www.securityfocus.com/bid/104021 | vdb-entryx_refsource_BID |
| https://access.redhat.com/errata/RHBA-2019:0327 | vendor-advisoryx_refsource_REDHAT |
| https://security.gentoo.org/glsa/201908-01 | vendor-advisoryx_refsource_GENTOO |
| https://usn.ubuntu.com/4336-1/ | vendor-advisoryx_refsource_UBUNTU |
Date Public
2018-04-29 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T07:39:08.313Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2018:3032",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3032"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=23113"
},
{
"name": "104021",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/104021"
},
{
"name": "RHBA-2019:0327",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "https://access.redhat.com/errata/RHBA-2019:0327"
},
{
"name": "GLSA-201908-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "https://security.gentoo.org/glsa/201908-01"
},
{
"name": "USN-4336-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU",
"x_transferred"
],
"url": "https://usn.ubuntu.com/4336-1/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2018-04-29T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-04-29T02:06:22.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "RHSA-2018:3032",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2018:3032"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=23113"
},
{
"name": "104021",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/104021"
},
{
"name": "RHBA-2019:0327",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHBA-2019:0327"
},
{
"name": "GLSA-201908-01",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "https://security.gentoo.org/glsa/201908-01"
},
{
"name": "USN-4336-1",
"tags": [
"vendor-advisory",
"x_refsource_UBUNTU"
],
"url": "https://usn.ubuntu.com/4336-1/"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2018-10535",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "RHSA-2018:3032",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHSA-2018:3032"
},
{
"name": "https://sourceware.org/bugzilla/show_bug.cgi?id=23113",
"refsource": "MISC",
"url": "https://sourceware.org/bugzilla/show_bug.cgi?id=23113"
},
{
"name": "104021",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/104021"
},
{
"name": "RHBA-2019:0327",
"refsource": "REDHAT",
"url": "https://access.redhat.com/errata/RHBA-2019:0327"
},
{
"name": "GLSA-201908-01",
"refsource": "GENTOO",
"url": "https://security.gentoo.org/glsa/201908-01"
},
{
"name": "USN-4336-1",
"refsource": "UBUNTU",
"url": "https://usn.ubuntu.com/4336-1/"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2018-10535",
"datePublished": "2018-04-29T15:00:00.000Z",
"dateReserved": "2018-04-29T00:00:00.000Z",
"dateUpdated": "2024-08-05T07:39:08.313Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
usn-4336-1
Vulnerability from osv_ubuntu
Published
2020-04-22 11:40
Modified
2026-04-27 14:11
Summary
binutils vulnerabilities
Details
It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.
References
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2018-8945",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-9138",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10372",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10373",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10534",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10535",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12641",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12697",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12698",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12699",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12700",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12934",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-13033",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17358",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17359",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17360",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17794",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17985",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18309",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18483",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18484",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18605",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18606",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18607",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18700",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18701",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-19931",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-19932",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20002",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20623",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20651",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20671",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-1000876",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9070",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9071",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9073",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9074",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9075",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9077",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-12972",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-14250",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-14444",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-17450",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-17451",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:18.04:LTS"
}
},
"ecosystem_specific": {
"availability": "No subscription required",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-common",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-for-build",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-for-host",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-i686-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-ia64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mips64el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa32r6-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa32r6el-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-riscv64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-source",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-kfreebsd-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-linux-gnu",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "binutils-x86-64-linux-gnux32",
"binary_version": "2.30-21ubuntu1~18.04.3"
},
{
"binary_name": "libbinutils",
"binary_version": "2.30-21ubuntu1~18.04.3"
}
]
},
"package": {
"ecosystem": "Ubuntu:18.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.30-21ubuntu1~18.04.3"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.29.1-4ubuntu1",
"2.29.1-6ubuntu1",
"2.29.1-7ubuntu1",
"2.29.1-8ubuntu1",
"2.29.1-10ubuntu1",
"2.29.1-12ubuntu1",
"2.30-4ubuntu1",
"2.30-5ubuntu1",
"2.30-7ubuntu1",
"2.30-8ubuntu1",
"2.30-9ubuntu1",
"2.30-10ubuntu1",
"2.30-11ubuntu1",
"2.30-14ubuntu2",
"2.30-15ubuntu1",
"2.30-20ubuntu2~18.04",
"2.30-21ubuntu1~18.04",
"2.30-21ubuntu1~18.04.1",
"2.30-21ubuntu1~18.04.2"
]
}
],
"aliases": [],
"details": "It was discovered that GNU binutils contained a large number of security\nissues. If a user or automated system were tricked into processing a\nspecially-crafted file, a remote attacker could cause GNU binutils to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n",
"id": "USN-4336-1",
"modified": "2026-04-27T14:11:25Z",
"published": "2020-04-22T11:40:31Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4336-1"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-8945"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-9138"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10372"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10373"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10534"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10535"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12641"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12697"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12698"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12699"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12700"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12934"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-13033"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17358"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17359"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17360"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17794"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17985"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18309"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18483"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18484"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18605"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18606"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18607"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18700"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18701"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-19931"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-19932"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20002"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20623"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20651"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20671"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1000876"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9070"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9071"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9073"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9074"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9075"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9077"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-12972"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-14250"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-14444"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-17450"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-17451"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "binutils vulnerabilities",
"upstream": [
"UBUNTU-CVE-2018-8945",
"UBUNTU-CVE-2018-9138",
"UBUNTU-CVE-2018-10372",
"UBUNTU-CVE-2018-10373",
"UBUNTU-CVE-2018-10534",
"UBUNTU-CVE-2018-10535",
"UBUNTU-CVE-2018-12641",
"UBUNTU-CVE-2018-12697",
"UBUNTU-CVE-2018-12698",
"UBUNTU-CVE-2018-12699",
"UBUNTU-CVE-2018-12700",
"UBUNTU-CVE-2018-12934",
"UBUNTU-CVE-2018-13033",
"UBUNTU-CVE-2018-17358",
"UBUNTU-CVE-2018-17359",
"UBUNTU-CVE-2018-17360",
"UBUNTU-CVE-2018-17794",
"UBUNTU-CVE-2018-17985",
"UBUNTU-CVE-2018-18309",
"UBUNTU-CVE-2018-18483",
"UBUNTU-CVE-2018-18484",
"UBUNTU-CVE-2018-18605",
"UBUNTU-CVE-2018-18606",
"UBUNTU-CVE-2018-18607",
"UBUNTU-CVE-2018-18700",
"UBUNTU-CVE-2018-18701",
"UBUNTU-CVE-2018-19931",
"UBUNTU-CVE-2018-19932",
"UBUNTU-CVE-2018-20002",
"UBUNTU-CVE-2018-20623",
"UBUNTU-CVE-2018-20651",
"UBUNTU-CVE-2018-20671",
"UBUNTU-CVE-2018-1000876",
"UBUNTU-CVE-2019-9070",
"UBUNTU-CVE-2019-9071",
"UBUNTU-CVE-2019-9073",
"UBUNTU-CVE-2019-9074",
"UBUNTU-CVE-2019-9075",
"UBUNTU-CVE-2019-9077",
"UBUNTU-CVE-2019-12972",
"UBUNTU-CVE-2019-14250",
"UBUNTU-CVE-2019-14444",
"UBUNTU-CVE-2019-17450",
"UBUNTU-CVE-2019-17451"
]
}
usn-4336-2
Vulnerability from osv_ubuntu
Published
2021-07-21 13:08
Modified
2026-06-25 10:45
Summary
binutils vulnerabilities
Details
USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.
References
| URL | Type | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
{
"affected": [
{
"database_specific": {
"cves_map": {
"cves": [
{
"id": "CVE-2016-2226",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4487",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4488",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4489",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4490",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4491",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4492",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-4493",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2016-6131",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-6965",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-6966",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-6969",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7209",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7210",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7223",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7224",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7225",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7226",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7227",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7299",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7300",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7301",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7302",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-7614",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8393",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8394",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8395",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8396",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8397",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8398",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-8421",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9038",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9039",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9040",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9041",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9042",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9044",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9742",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9744",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9745",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9746",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9747",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9748",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9749",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9750",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9751",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9752",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9753",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9754",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9755",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9756",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-9954",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12448",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12449",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12450",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12451",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12452",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12453",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12454",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12455",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12456",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12457",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12458",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12459",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12799",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-12967",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-13710",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14128",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14129",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14130",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14333",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14529",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14930",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14932",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14938",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14939",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-14940",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15020",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15021",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15022",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15024",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15025",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15225",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15938",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15939",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-15996",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-16826",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-16827",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-16828",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-16831",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-16832",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-17080",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-17121",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-17123",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-17124",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2017-17125",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-6323",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-6543",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-6759",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-7208",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-7568",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-7569",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-7642",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-7643",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-8945",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-9138",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10372",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10373",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10534",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-10535",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12641",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12697",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12698",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12699",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12700",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-12934",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-13033",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17358",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17359",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17360",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17794",
"severity": [
{
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-17985",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18309",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18483",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18484",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18605",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18606",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18607",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18700",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-18701",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-19931",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-19932",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20002",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20623",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-20671",
"severity": [
{
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2018-1000876",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9070",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9071",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9073",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9074",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9075",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-9077",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-12972",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-14250",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-14444",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-17450",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "low",
"type": "Ubuntu"
}
]
},
{
"id": "CVE-2019-17451",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
]
}
],
"ecosystem": "Ubuntu:Pro:16.04:LTS"
}
},
"ecosystem_specific": {
"availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
"binaries": [
{
"binary_name": "binutils",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-aarch64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-alpha-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-arm-linux-gnueabi",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-arm-linux-gnueabihf",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-hppa-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-hppa64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-m68k-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips64-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mips64el-linux-gnuabi64",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-mipsel-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-multiarch",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc-linux-gnuspe",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-powerpc64le-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-s390x-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-sh4-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-source",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
},
{
"binary_name": "binutils-sparc64-linux-gnu",
"binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
}
]
},
"package": {
"ecosystem": "Ubuntu:Pro:16.04:LTS",
"name": "binutils",
"purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"2.25.1-6ubuntu1",
"2.25.51.20151022-0ubuntu2",
"2.25.51.20151022-0ubuntu3",
"2.25.51.20151027-0ubuntu1",
"2.25.51.20151028-0ubuntu1",
"2.25.51.20151106-0ubuntu1",
"2.25.51.20151113-1ubuntu1",
"2.25.51.20151113-2ubuntu1",
"2.25.90.20151125-1ubuntu1",
"2.25.90.20151125-2ubuntu1",
"2.25.90.20151211-0ubuntu1",
"2.25.90.20151211-0ubuntu2",
"2.25.90.20160101-1ubuntu1",
"2.25.90.20160101-1ubuntu2",
"2.26-2ubuntu1",
"2.26-3ubuntu1",
"2.26-4ubuntu1",
"2.26-5ubuntu1",
"2.26-6ubuntu1",
"2.26-7ubuntu2",
"2.26-8ubuntu1",
"2.26-8ubuntu2",
"2.26-8ubuntu2.1",
"2.26.1-1ubuntu1~16.04",
"2.26.1-1ubuntu1~16.04.1",
"2.26.1-1ubuntu1~16.04.3",
"2.26.1-1ubuntu1~16.04.4",
"2.26.1-1ubuntu1~16.04.5",
"2.26.1-1ubuntu1~16.04.6",
"2.26.1-1ubuntu1~16.04.7",
"2.26.1-1ubuntu1~16.04.8"
]
}
],
"aliases": [],
"details": "USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides\nthe corresponding update for Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that GNU binutils contained a large number of security\n issues. If a user or automated system were tricked into processing a\n specially-crafted file, a remote attacker could cause GNU binutils to\n crash, resulting in a denial of service, or possibly execute arbitrary\n code.\n",
"id": "USN-4336-2",
"modified": "2026-06-25T10:45:55Z",
"published": "2021-07-21T13:08:04Z",
"references": [
{
"type": "ADVISORY",
"url": "https://ubuntu.com/security/notices/USN-4336-2"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-2226"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4487"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4488"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4489"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4490"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4491"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4492"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-4493"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2016-6131"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-6965"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-6966"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-6969"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7209"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7210"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7223"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7224"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7225"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7226"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7227"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7299"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7300"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7301"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7302"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-7614"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8393"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8394"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8395"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8396"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8397"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8398"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-8421"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9038"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9039"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9040"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9041"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9042"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9044"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9742"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9744"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9745"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9746"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9747"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9748"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9749"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9750"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9751"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9752"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9753"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9754"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9755"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9756"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-9954"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12448"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12449"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12450"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12451"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12452"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12453"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12454"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12455"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12456"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12457"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12458"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12459"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12799"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-12967"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-13710"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14128"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14129"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14130"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14333"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14529"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14930"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14932"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14938"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14939"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-14940"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15020"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15021"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15022"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15024"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15025"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15225"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15938"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15939"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-15996"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-16826"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-16827"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-16828"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-16831"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-16832"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-17080"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-17121"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-17123"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-17124"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2017-17125"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-6323"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-6543"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-6759"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-7208"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-7568"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-7569"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-7642"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-7643"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-8945"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-9138"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10372"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10373"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10534"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-10535"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12641"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12697"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12698"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12699"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12700"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-12934"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-13033"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17358"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17359"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17360"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17794"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-17985"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18309"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18483"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18484"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18605"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18606"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18607"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18700"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-18701"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-19931"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-19932"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20002"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20623"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-20671"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2018-1000876"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9070"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9071"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9073"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9074"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9075"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-9077"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-12972"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-14250"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-14444"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-17450"
},
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2019-17451"
}
],
"related": [],
"schema_version": "1.7.0",
"summary": "binutils vulnerabilities",
"upstream": [
"UBUNTU-CVE-2016-2226",
"UBUNTU-CVE-2016-4487",
"UBUNTU-CVE-2016-4488",
"UBUNTU-CVE-2016-4489",
"UBUNTU-CVE-2016-4490",
"UBUNTU-CVE-2016-4491",
"UBUNTU-CVE-2016-4492",
"UBUNTU-CVE-2016-4493",
"UBUNTU-CVE-2016-6131",
"UBUNTU-CVE-2017-6965",
"UBUNTU-CVE-2017-6966",
"UBUNTU-CVE-2017-6969",
"UBUNTU-CVE-2017-7209",
"UBUNTU-CVE-2017-7210",
"UBUNTU-CVE-2017-7223",
"UBUNTU-CVE-2017-7224",
"UBUNTU-CVE-2017-7225",
"UBUNTU-CVE-2017-7226",
"UBUNTU-CVE-2017-7227",
"UBUNTU-CVE-2017-7299",
"UBUNTU-CVE-2017-7300",
"UBUNTU-CVE-2017-7301",
"UBUNTU-CVE-2017-7302",
"UBUNTU-CVE-2017-7614",
"UBUNTU-CVE-2017-8393",
"UBUNTU-CVE-2017-8394",
"UBUNTU-CVE-2017-8395",
"UBUNTU-CVE-2017-8396",
"UBUNTU-CVE-2017-8397",
"UBUNTU-CVE-2017-8398",
"UBUNTU-CVE-2017-8421",
"UBUNTU-CVE-2017-9038",
"UBUNTU-CVE-2017-9039",
"UBUNTU-CVE-2017-9040",
"UBUNTU-CVE-2017-9041",
"UBUNTU-CVE-2017-9042",
"UBUNTU-CVE-2017-9044",
"UBUNTU-CVE-2017-9742",
"UBUNTU-CVE-2017-9744",
"UBUNTU-CVE-2017-9745",
"UBUNTU-CVE-2017-9746",
"UBUNTU-CVE-2017-9747",
"UBUNTU-CVE-2017-9748",
"UBUNTU-CVE-2017-9749",
"UBUNTU-CVE-2017-9750",
"UBUNTU-CVE-2017-9751",
"UBUNTU-CVE-2017-9752",
"UBUNTU-CVE-2017-9753",
"UBUNTU-CVE-2017-9754",
"UBUNTU-CVE-2017-9755",
"UBUNTU-CVE-2017-9756",
"UBUNTU-CVE-2017-9954",
"UBUNTU-CVE-2017-12448",
"UBUNTU-CVE-2017-12449",
"UBUNTU-CVE-2017-12450",
"UBUNTU-CVE-2017-12451",
"UBUNTU-CVE-2017-12452",
"UBUNTU-CVE-2017-12453",
"UBUNTU-CVE-2017-12454",
"UBUNTU-CVE-2017-12455",
"UBUNTU-CVE-2017-12456",
"UBUNTU-CVE-2017-12457",
"UBUNTU-CVE-2017-12458",
"UBUNTU-CVE-2017-12459",
"UBUNTU-CVE-2017-12799",
"UBUNTU-CVE-2017-12967",
"UBUNTU-CVE-2017-13710",
"UBUNTU-CVE-2017-14128",
"UBUNTU-CVE-2017-14129",
"UBUNTU-CVE-2017-14130",
"UBUNTU-CVE-2017-14333",
"UBUNTU-CVE-2017-14529",
"UBUNTU-CVE-2017-14930",
"UBUNTU-CVE-2017-14932",
"UBUNTU-CVE-2017-14938",
"UBUNTU-CVE-2017-14939",
"UBUNTU-CVE-2017-14940",
"UBUNTU-CVE-2017-15020",
"UBUNTU-CVE-2017-15021",
"UBUNTU-CVE-2017-15022",
"UBUNTU-CVE-2017-15024",
"UBUNTU-CVE-2017-15025",
"UBUNTU-CVE-2017-15225",
"UBUNTU-CVE-2017-15938",
"UBUNTU-CVE-2017-15939",
"UBUNTU-CVE-2017-15996",
"UBUNTU-CVE-2017-16826",
"UBUNTU-CVE-2017-16827",
"UBUNTU-CVE-2017-16828",
"UBUNTU-CVE-2017-16831",
"UBUNTU-CVE-2017-16832",
"UBUNTU-CVE-2017-17080",
"UBUNTU-CVE-2017-17121",
"UBUNTU-CVE-2017-17123",
"UBUNTU-CVE-2017-17124",
"UBUNTU-CVE-2017-17125",
"UBUNTU-CVE-2018-6323",
"UBUNTU-CVE-2018-6543",
"UBUNTU-CVE-2018-6759",
"UBUNTU-CVE-2018-7208",
"UBUNTU-CVE-2018-7568",
"UBUNTU-CVE-2018-7569",
"UBUNTU-CVE-2018-7642",
"UBUNTU-CVE-2018-7643",
"UBUNTU-CVE-2018-8945",
"UBUNTU-CVE-2018-9138",
"UBUNTU-CVE-2018-10372",
"UBUNTU-CVE-2018-10373",
"UBUNTU-CVE-2018-10534",
"UBUNTU-CVE-2018-10535",
"UBUNTU-CVE-2018-12641",
"UBUNTU-CVE-2018-12697",
"UBUNTU-CVE-2018-12698",
"UBUNTU-CVE-2018-12699",
"UBUNTU-CVE-2018-12700",
"UBUNTU-CVE-2018-12934",
"UBUNTU-CVE-2018-13033",
"UBUNTU-CVE-2018-17358",
"UBUNTU-CVE-2018-17359",
"UBUNTU-CVE-2018-17360",
"UBUNTU-CVE-2018-17794",
"UBUNTU-CVE-2018-17985",
"UBUNTU-CVE-2018-18309",
"UBUNTU-CVE-2018-18483",
"UBUNTU-CVE-2018-18484",
"UBUNTU-CVE-2018-18605",
"UBUNTU-CVE-2018-18606",
"UBUNTU-CVE-2018-18607",
"UBUNTU-CVE-2018-18700",
"UBUNTU-CVE-2018-18701",
"UBUNTU-CVE-2018-19931",
"UBUNTU-CVE-2018-19932",
"UBUNTU-CVE-2018-20002",
"UBUNTU-CVE-2018-20623",
"UBUNTU-CVE-2018-20671",
"UBUNTU-CVE-2018-1000876",
"UBUNTU-CVE-2019-9070",
"UBUNTU-CVE-2019-9071",
"UBUNTU-CVE-2019-9073",
"UBUNTU-CVE-2019-9074",
"UBUNTU-CVE-2019-9075",
"UBUNTU-CVE-2019-9077",
"UBUNTU-CVE-2019-12972",
"UBUNTU-CVE-2019-14250",
"UBUNTU-CVE-2019-14444",
"UBUNTU-CVE-2019-17450",
"UBUNTU-CVE-2019-17451"
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…