According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An integer wraparound has been discovered in the Binary     File Descriptor (BFD) library distributed in GNU     Binutils up to version 2.30. An attacker could cause a     crash by providing an ELF file with corrupted DWARF     debug information.i1/4^CVE-2018-7568i1/4%0

  - An integer wraparound has been discovered in the Binary     File Descriptor (BFD) library distributed in GNU     Binutils up to version 2.30. An attacker could cause a     crash by providing an ELF file with corrupted DWARF     debug information.i1/4^CVE-2018-7569i1/4%0

  - The swap_std_reloc_in function in aoutx.h in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.30, allows remote     attackers to cause a denial of service     (aout_32_swap_std_reloc_out NULL pointer dereference     and application crash) via a crafted ELF file, as     demonstrated by objcopy.i1/4^CVE-2018-7642i1/4%0

  - The bfd_section_from_shdr function in elf.c in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.30, allows remote     attackers to cause a denial of service (segmentation     fault) via a large attribute     section.i1/4^CVE-2018-8945i1/4%0

  - process_cu_tu_index in dwarf.c in GNU Binutils 2.30     allows remote attackers to cause a denial of service     (heap-based buffer over-read and application crash) via     a crafted binary file, as demonstrated by     readelf.i1/4^CVE-2018-10372i1/4%0

  - concat_filename in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.30, allows remote attackers to cause     a denial of service (NULL pointer dereference and     application crash) via a crafted binary file, as     demonstrated by nm-new.i1/4^CVE-2018-10373i1/4%0

  - The _bfd_XX_bfd_copy_private_bfd_data_common function     in peXXigen.c in the Binary File Descriptor (BFD)     library (aka libbfd), as distributed in GNU Binutils     2.30, processes a negative Data Directory size with an     unbounded loop that increases the value of     (external_IMAGE_DEBUG_DIRECTORY) *edd so that the     address exceeds its own memory region, resulting in an     out-of-bounds memory write, as demonstrated by objcopy     copying private info with
    _bfd_pex64_bfd_copy_private_bfd_data_common in     pex64igen.c.i1/4^CVE-2018-10534i1/4%0

  - The ignore_section_sym function in elf.c in the Binary     File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.30, does not validate the     output_section pointer in the case of a symtab entry     with a 'SECTION' type that has a '0' value, which     allows remote attackers to cause a denial of service     (NULL pointer dereference and application crash) via a     crafted file, as demonstrated by     objcopy.i1/4^CVE-2018-10535i1/4%0

  - The _bfd_elf_parse_attributes function in elf-attrs.c     in the Binary File Descriptor (BFD) library (aka     libbfd), as distributed in GNU Binutils 2.29, allows     remote attackers to cause a denial of service     (_bfd_elf_attr_strdup heap-based buffer over-read and     application crash) via a crafted ELF     file.i1/4^CVE-2017-14130i1/4%0

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Detections

Analytics

EulerOS Virtualization 2.5.4 : binutils (EulerOS-SA-2019-1219)

medium Nessus Plugin ID 123905

Version 1.9