Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4336-2 advisory.

    USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update     for Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a     stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(),     and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-     of-service via an ELF file, as demonstrated by nm. (CVE-2018-18700)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4326-1 advisory.

    It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated     system were tricked into processing a specially crafted binary, a remote attacker could use this issue to     cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4336-1 advisory.

    It was discovered that GNU binutils contained a large number of security issues. If a user or automated     system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils     to crash, resulting in a denial of service, or possibly execute arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the crash package has been released.

An update of the binutils package has been released.

ID	Name	Product	Family	Published	Updated	Severity
121563	Fedora 29 : binutils (2019-ba3cbcfd20)	Nessus	Fedora Local Security Checks	2/4/2019	6/24/2024	high
151919	Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-4336-2)	Nessus	Ubuntu Local Security Checks	7/21/2021	10/29/2024	critical
222238	Linux Distros Unpatched Vulnerability : CVE-2018-18700	Nessus	Misc.	3/4/2025	3/4/2025	medium
135398	Ubuntu 16.04 LTS / 18.04 LTS : libiberty vulnerabilities (USN-4326-1)	Nessus	Ubuntu Local Security Checks	4/10/2020	8/29/2024	high
135966	Ubuntu 18.04 LTS : GNU binutils vulnerabilities (USN-4336-1)	Nessus	Ubuntu Local Security Checks	4/24/2020	8/27/2024	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	7/23/2024	7/23/2024	critical
122027	Photon OS 2.0: Binutils PHSA-2019-2.0-0119	Nessus	PhotonOS Local Security Checks	2/7/2019	7/23/2024	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	critical

Detections

Analytics

Plugins Search

high

critical

medium

high

critical

critical

medium

critical