Vulnerability-Lookup

usn-4336-1

Vulnerability from osv_ubuntu

Published

2020-04-22 11:40

Modified

2026-04-27 14:11

Summary

binutils vulnerabilities

Details

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

References

URL

Type

	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/CVE-2018-8945	REPORT
	https://ubuntu.com/security/CVE-2018-9138	REPORT
	https://ubuntu.com/security/CVE-2018-10372	REPORT
	https://ubuntu.com/security/CVE-2018-10373	REPORT
	https://ubuntu.com/security/CVE-2018-10534	REPORT
	https://ubuntu.com/security/CVE-2018-10535	REPORT
	https://ubuntu.com/security/CVE-2018-12641	REPORT
	https://ubuntu.com/security/CVE-2018-12697	REPORT
	https://ubuntu.com/security/CVE-2018-12698	REPORT
	https://ubuntu.com/security/CVE-2018-12699	REPORT
	https://ubuntu.com/security/CVE-2018-12700	REPORT
	https://ubuntu.com/security/CVE-2018-12934	REPORT
	https://ubuntu.com/security/CVE-2018-13033	REPORT
	https://ubuntu.com/security/CVE-2018-17358	REPORT
	https://ubuntu.com/security/CVE-2018-17359	REPORT
	https://ubuntu.com/security/CVE-2018-17360	REPORT
	https://ubuntu.com/security/CVE-2018-17794	REPORT
	https://ubuntu.com/security/CVE-2018-17985	REPORT
	https://ubuntu.com/security/CVE-2018-18309	REPORT
	https://ubuntu.com/security/CVE-2018-18483	REPORT
	https://ubuntu.com/security/CVE-2018-18484	REPORT
	https://ubuntu.com/security/CVE-2018-18605	REPORT
	https://ubuntu.com/security/CVE-2018-18606	REPORT
	https://ubuntu.com/security/CVE-2018-18607	REPORT
	https://ubuntu.com/security/CVE-2018-18700	REPORT
	https://ubuntu.com/security/CVE-2018-18701	REPORT
	https://ubuntu.com/security/CVE-2018-19931	REPORT
	https://ubuntu.com/security/CVE-2018-19932	REPORT
	https://ubuntu.com/security/CVE-2018-20002	REPORT
	https://ubuntu.com/security/CVE-2018-20623	REPORT
	https://ubuntu.com/security/CVE-2018-20651	REPORT
	https://ubuntu.com/security/CVE-2018-20671	REPORT
	https://ubuntu.com/security/CVE-2018-1000876	REPORT
	https://ubuntu.com/security/CVE-2019-9070	REPORT
	https://ubuntu.com/security/CVE-2019-9071	REPORT
	https://ubuntu.com/security/CVE-2019-9073	REPORT
	https://ubuntu.com/security/CVE-2019-9074	REPORT
	https://ubuntu.com/security/CVE-2019-9075	REPORT
	https://ubuntu.com/security/CVE-2019-9077	REPORT
	https://ubuntu.com/security/CVE-2019-12972	REPORT
	https://ubuntu.com/security/CVE-2019-14250	REPORT
	https://ubuntu.com/security/CVE-2019-14444	REPORT
	https://ubuntu.com/security/CVE-2019-17450	REPORT
	https://ubuntu.com/security/CVE-2019-17451	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2018-8945",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-9138",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-10372",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-10373",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-10534",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-10535",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12641",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12697",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12698",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12699",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12700",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-12934",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-13033",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-17358",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-17359",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-17360",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-17794",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-17985",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18309",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18483",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18484",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18605",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18606",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18607",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18700",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-18701",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-19931",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-19932",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-20002",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-20623",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-20651",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-20671",
              "severity": [
                {
                  "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2018-1000876",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9070",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9071",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9073",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9074",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9075",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-9077",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-12972",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-14250",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-14444",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-17450",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2019-17451",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:18.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "It was discovered that GNU binutils contained a large number of security\nissues. If a user or automated system were tricked into processing a\nspecially-crafted file, a remote attacker could cause GNU binutils to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n",
  "id": "USN-4336-1",
  "modified": "2026-04-27T14:11:25Z",
  "published": "2020-04-22T11:40:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-8945"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-9138"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10372"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10373"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10534"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10535"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12641"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12697"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12698"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12699"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12700"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12934"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-13033"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-17358"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-17359"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-17360"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-17794"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-17985"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18309"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18483"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18484"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18605"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18606"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18607"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18700"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-18701"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-19931"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-19932"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20002"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20623"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20651"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-20671"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-1000876"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9070"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9071"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9073"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9074"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9075"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-9077"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-12972"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-14250"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-14444"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-17450"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2019-17451"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "binutils vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2018-8945",
    "UBUNTU-CVE-2018-9138",
    "UBUNTU-CVE-2018-10372",
    "UBUNTU-CVE-2018-10373",
    "UBUNTU-CVE-2018-10534",
    "UBUNTU-CVE-2018-10535",
    "UBUNTU-CVE-2018-12641",
    "UBUNTU-CVE-2018-12697",
    "UBUNTU-CVE-2018-12698",
    "UBUNTU-CVE-2018-12699",
    "UBUNTU-CVE-2018-12700",
    "UBUNTU-CVE-2018-12934",
    "UBUNTU-CVE-2018-13033",
    "UBUNTU-CVE-2018-17358",
    "UBUNTU-CVE-2018-17359",
    "UBUNTU-CVE-2018-17360",
    "UBUNTU-CVE-2018-17794",
    "UBUNTU-CVE-2018-17985",
    "UBUNTU-CVE-2018-18309",
    "UBUNTU-CVE-2018-18483",
    "UBUNTU-CVE-2018-18484",
    "UBUNTU-CVE-2018-18605",
    "UBUNTU-CVE-2018-18606",
    "UBUNTU-CVE-2018-18607",
    "UBUNTU-CVE-2018-18700",
    "UBUNTU-CVE-2018-18701",
    "UBUNTU-CVE-2018-19931",
    "UBUNTU-CVE-2018-19932",
    "UBUNTU-CVE-2018-20002",
    "UBUNTU-CVE-2018-20623",
    "UBUNTU-CVE-2018-20651",
    "UBUNTU-CVE-2018-20671",
    "UBUNTU-CVE-2018-1000876",
    "UBUNTU-CVE-2019-9070",
    "UBUNTU-CVE-2019-9071",
    "UBUNTU-CVE-2019-9073",
    "UBUNTU-CVE-2019-9074",
    "UBUNTU-CVE-2019-9075",
    "UBUNTU-CVE-2019-9077",
    "UBUNTU-CVE-2019-12972",
    "UBUNTU-CVE-2019-14250",
    "UBUNTU-CVE-2019-14444",
    "UBUNTU-CVE-2019-17450",
    "UBUNTU-CVE-2019-17451"
  ]
}

ubuntu-cve-2018-1000876

Vulnerability from osv_ubuntu

Published

2018-12-20 17:29

Modified

2026-04-22 07:38

Summary

Details

binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.

Severity

7.8 (High)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-1000876	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-1000876	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.",
  "id": "UBUNTU-CVE-2018-1000876",
  "modified": "2026-04-22T07:38:48Z",
  "published": "2018-12-20T17:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-1000876"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-1000876"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-1000876"
  ]
}

ubuntu-cve-2018-10372

Vulnerability from osv_ubuntu

Published

2018-04-25 09:29

Modified

2026-04-22 07:38

Summary

Details

process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.

Severity

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-10372	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-10372	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.",
  "id": "UBUNTU-CVE-2018-10372",
  "modified": "2026-04-22T07:38:36Z",
  "published": "2018-04-25T09:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10372"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10372"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-10372"
  ]
}

ubuntu-cve-2018-10373

Vulnerability from osv_ubuntu

Published

2018-04-25 09:29

Modified

2026-04-22 07:38

Summary

Details

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.

Severity

6.5 (Medium)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-10373	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-10373	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.",
  "id": "UBUNTU-CVE-2018-10373",
  "modified": "2026-04-22T07:38:36Z",
  "published": "2018-04-25T09:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10373"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10373"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-10373"
  ]
}

ubuntu-cve-2018-10534

Vulnerability from osv_ubuntu

Published

2018-04-29 15:29

Modified

2026-04-22 07:38

Summary

Details

The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.

Severity

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-10534	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-10534	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "The _bfd_XX_bfd_copy_private_bfd_data_common function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (external_IMAGE_DEBUG_DIRECTORY) *edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with _bfd_pex64_bfd_copy_private_bfd_data_common in pex64igen.c.",
  "id": "UBUNTU-CVE-2018-10534",
  "modified": "2026-04-22T07:38:36Z",
  "published": "2018-04-29T15:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10534"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10534"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-10534"
  ]
}

ubuntu-cve-2018-10535

Vulnerability from osv_ubuntu

Published

2018-04-29 15:29

Modified

2026-04-22 07:38

Summary

Details

The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.

Severity

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-10535	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-10535	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab entry with a \"SECTION\" type that has a \"0\" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.",
  "id": "UBUNTU-CVE-2018-10535",
  "modified": "2026-04-22T07:38:36Z",
  "published": "2018-04-29T15:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-10535"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-10535"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-10535"
  ]
}

ubuntu-cve-2018-12641

Vulnerability from osv_ubuntu

Published

2018-06-22 12:29

Modified

2026-04-22 07:38

Summary

Details

An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.

Severity

5.5 (Medium)


                    
                      CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12641	REPORT
	https://ubuntu.com/security/notices/USN-4326-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12641	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20160215-1ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20160215-1ubuntu0.3?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20160215-1ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20141014-1",
        "20160215-1",
        "20160215-1ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20170913-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20170913-1ubuntu0.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20170913-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20170913-1"
      ]
    }
  ],
  "aliases": [],
  "details": "An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.",
  "id": "UBUNTU-CVE-2018-12641",
  "modified": "2026-04-22T07:38:39Z",
  "published": "2018-06-22T12:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12641"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4326-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12641"
    }
  ],
  "related": [
    "USN-4326-1",
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12641"
  ]
}

ubuntu-cve-2018-12697

Vulnerability from osv_ubuntu

Published

2018-06-23 23:29

Modified

2026-04-22 07:38

Summary

Details

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12697	REPORT
	https://ubuntu.com/security/notices/USN-4326-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12697	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20160215-1ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20160215-1ubuntu0.3?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20160215-1ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20141014-1",
        "20160215-1",
        "20160215-1ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20170913-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20170913-1ubuntu0.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20170913-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20170913-1"
      ]
    }
  ],
  "aliases": [],
  "details": "A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.",
  "id": "UBUNTU-CVE-2018-12697",
  "modified": "2026-04-22T07:38:39Z",
  "published": "2018-06-23T23:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12697"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4326-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12697"
    }
  ],
  "related": [
    "USN-4326-1",
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12697"
  ]
}

ubuntu-cve-2018-12698

Vulnerability from osv_ubuntu

Published

2018-06-23 23:29

Modified

2026-04-22 07:38

Summary

Details

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12698	REPORT
	https://ubuntu.com/security/notices/USN-4326-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12698	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20160215-1ubuntu0.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:16.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20160215-1ubuntu0.3?arch=source\u0026distro=xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20160215-1ubuntu0.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20141014-1",
        "20160215-1",
        "20160215-1ubuntu0.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "libiberty-dev",
            "binary_version": "20170913-1ubuntu0.1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "libiberty",
        "purl": "pkg:deb/ubuntu/libiberty@20170913-1ubuntu0.1?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20170913-1ubuntu0.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "20170913-1"
      ]
    }
  ],
  "aliases": [],
  "details": "demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the \"Create an array for saving the template argument values\" XNEWVEC call. This can occur during execution of objdump.",
  "id": "UBUNTU-CVE-2018-12698",
  "modified": "2026-04-22T07:38:39Z",
  "published": "2018-06-23T23:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12698"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4326-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12698"
    }
  ],
  "related": [
    "USN-4326-1",
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12698"
  ]
}

ubuntu-cve-2018-12699

Vulnerability from osv_ubuntu

Published

2018-06-23 23:29

Modified

2026-04-22 07:38

Summary

Details

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.

Severity

9.8 (Critical)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12699	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12699	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          },
          {
            "binary_name": "binutils-static",
            "binary_version": "2.24-5ubuntu14.2+esm8"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:14.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.24-5ubuntu14.2+esm8?arch=source\u0026distro=esm-infra-legacy/trusty"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.23.52.20130913-0ubuntu1",
        "2.23.90.20131017-1ubuntu1",
        "2.23.90.20131116-1ubuntu1",
        "2.23.91.20131123-1ubuntu1",
        "2.24-1ubuntu1",
        "2.24-1ubuntu2",
        "2.24-2ubuntu1",
        "2.24-2ubuntu2",
        "2.24-2ubuntu3",
        "2.24-4ubuntu1",
        "2.24-5ubuntu1",
        "2.24-5ubuntu2",
        "2.24-5ubuntu3",
        "2.24-5ubuntu3.1",
        "2.24-5ubuntu13",
        "2.24-5ubuntu14",
        "2.24-5ubuntu14.1",
        "2.24-5ubuntu14.2",
        "2.24-5ubuntu14.2+esm1",
        "2.24-5ubuntu14.2+esm2",
        "2.24-5ubuntu14.2+esm3",
        "2.24-5ubuntu14.2+esm5",
        "2.24-5ubuntu14.2+esm6",
        "2.24-5ubuntu14.2+esm7",
        "2.24-5ubuntu14.2+esm8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.",
  "id": "UBUNTU-CVE-2018-12699",
  "modified": "2026-04-22T07:38:39Z",
  "published": "2018-06-23T23:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12699"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12699"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12699"
  ]
}

ubuntu-cve-2018-12700

Vulnerability from osv_ubuntu

Published

2018-06-23 23:29

Modified

2026-04-22 07:38

Summary

Details

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none

Severity

7.5 (High)


                    
                      CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2018-12700	REPORT
	https://ubuntu.com/security/notices/USN-4336-1	ADVISORY
	https://ubuntu.com/security/notices/USN-4336-2	ADVISORY
	https://www.cve.org/CVERecord?id=CVE-2018-12700	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:16.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.26.1-1ubuntu1~16.04.8+esm1?arch=source\u0026distro=esm-infra/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.26.1-1ubuntu1~16.04.8+esm1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.25.1-6ubuntu1",
        "2.25.51.20151022-0ubuntu2",
        "2.25.51.20151022-0ubuntu3",
        "2.25.51.20151027-0ubuntu1",
        "2.25.51.20151028-0ubuntu1",
        "2.25.51.20151106-0ubuntu1",
        "2.25.51.20151113-1ubuntu1",
        "2.25.51.20151113-2ubuntu1",
        "2.25.90.20151125-1ubuntu1",
        "2.25.90.20151125-2ubuntu1",
        "2.25.90.20151211-0ubuntu1",
        "2.25.90.20151211-0ubuntu2",
        "2.25.90.20160101-1ubuntu1",
        "2.25.90.20160101-1ubuntu2",
        "2.26-2ubuntu1",
        "2.26-3ubuntu1",
        "2.26-4ubuntu1",
        "2.26-5ubuntu1",
        "2.26-6ubuntu1",
        "2.26-7ubuntu2",
        "2.26-8ubuntu1",
        "2.26-8ubuntu2",
        "2.26-8ubuntu2.1",
        "2.26.1-1ubuntu1~16.04",
        "2.26.1-1ubuntu1~16.04.1",
        "2.26.1-1ubuntu1~16.04.3",
        "2.26.1-1ubuntu1~16.04.4",
        "2.26.1-1ubuntu1~16.04.5",
        "2.26.1-1ubuntu1~16.04.6",
        "2.26.1-1ubuntu1~16.04.7",
        "2.26.1-1ubuntu1~16.04.8"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "binutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-aarch64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-alpha-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabi",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-arm-linux-gnueabihf",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-common",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-build",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-for-host",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-hppa64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-i686-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-ia64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-m68k-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mips64el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsel-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa32r6el-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabi64",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-mipsisa64r6el-linux-gnuabin32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-multiarch",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc-linux-gnuspe",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-powerpc64le-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-riscv64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-s390x-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sh4-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-source",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-sparc64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-kfreebsd-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnu",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "binutils-x86-64-linux-gnux32",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          },
          {
            "binary_name": "libbinutils",
            "binary_version": "2.30-21ubuntu1~18.04.3"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:18.04:LTS",
        "name": "binutils",
        "purl": "pkg:deb/ubuntu/binutils@2.30-21ubuntu1~18.04.3?arch=source\u0026distro=bionic"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "2.30-21ubuntu1~18.04.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.29.1-4ubuntu1",
        "2.29.1-6ubuntu1",
        "2.29.1-7ubuntu1",
        "2.29.1-8ubuntu1",
        "2.29.1-10ubuntu1",
        "2.29.1-12ubuntu1",
        "2.30-4ubuntu1",
        "2.30-5ubuntu1",
        "2.30-7ubuntu1",
        "2.30-8ubuntu1",
        "2.30-9ubuntu1",
        "2.30-10ubuntu1",
        "2.30-11ubuntu1",
        "2.30-14ubuntu2",
        "2.30-15ubuntu1",
        "2.30-20ubuntu2~18.04",
        "2.30-21ubuntu1~18.04",
        "2.30-21ubuntu1~18.04.1",
        "2.30-21ubuntu1~18.04.2"
      ]
    }
  ],
  "aliases": [],
  "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none",
  "id": "UBUNTU-CVE-2018-12700",
  "modified": "2026-04-22T07:38:39Z",
  "published": "2018-06-23T23:29:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2018-12700"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-4336-2"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2018-12700"
    }
  ],
  "related": [
    "USN-4336-1",
    "USN-4336-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2018-12700"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Vulnerability from osv_ubuntu

Tags

Sightings

Nomenclature