Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Ubuntu 22.04, 20.04 USN-6544-1 severe: binutils DoS issues

ubuntu
Calendar Grey December 11, 2023
Dist Ubuntu Esm H88
Explore critical updates to binutils addressing a wide array of security flaws in Ubuntu 22.04 LTS and beyond.
Several security issues were fixed in GNU binutils.

Summary

Several security issues were fixed in GNU binutils.

Software Description:

- binutils: GNU assembler, linker and binary utilities

Details:

It was discovered that GNU binutils incorrectly handled certain COFF files.

An attacker could possibly use this issue to cause a crash or execute

arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2022-38533)

It was discovered that GNU binutils was not properly performing bounds

checks in several functions, which could lead to a buffer overflow. An

attacker could possibly use this issue to cause a denial of service,

expose sensitive information or execute arbitrary code. This issue only

affected Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.

(CVE-2022-4285, CVE-2020-19726, CVE-2021-46174)

It was discovered that GNU binutils contained a reachable assertion, which

could lead to an intentional assertion failure when processing certain

crafted DWARF files. An attacker could possibly use this issue to cause a

denial of ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu binutils CVE issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS:
   binutils                        2.38-4ubuntu2.4
   binutils-multiarch              2.38-4ubuntu2.4

Ubuntu 20.04 LTS:
   binutils                        2.34-6ubuntu1.7
   binutils-multiarch              2.34-6ubuntu1.7

Ubuntu 14.04 LTS (Available with Ubuntu Pro):
   binutils                        2.24-5ubuntu14.2+esm6
   binutils-multiarch              2.24-5ubuntu14.2+esm6

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-6544-1

CVE-2020-19726, CVE-2021-46174, CVE-2022-35205, CVE-2022-38533,

CVE-2022-4285

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-6544-1

Topics%20covered

Topics Covered

security advisory denial of service software update Ubuntu binutils CVE issue

Package Information

https://launchpad.net/ubuntu/+source/binutils/2.38-4ubuntu2.4
https://launchpad.net/ubuntu/+source/binutils/2.34-6ubuntu1.7

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here