Test ID:	1.3.6.1.4.1.25623.1.1.12.2023.6413.1
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-6413-1)
Summary:	The remote host is missing an update for the 'binutils' package(s) announced via the USN-6413-1 advisory.
Description:	Summary: The remote host is missing an update for the 'binutils' package(s) announced via the USN-6413-1 advisory. Vulnerability Insight: It was discovered that GNU binutils was not properly performing checks when dealing with memory allocation operations, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2017-17122, CVE-2017-8421) It was discovered that GNU binutils was not properly performing bounds checks when processing debug sections with objdump, which could lead to an overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2018-20671, CVE-2018-6543) It was discovered that GNU binutils contained a reachable assertion, which could lead to an intentional assertion failure when processing certain crafted DWARF files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2022-35205) It was discovered that GNU binutils incorrectly handled memory management operations in several of its functions, which could lead to excessive memory consumption due to memory leaks. An attacker could possibly use these issues to cause a denial of service. (CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011) It was discovered that GNU binutils was not properly performing bounds checks when dealing with memory allocation operations, which could lead to excessive memory consumption. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-48063) Affected Software/OS: 'binutils' package(s) on Ubuntu 14.04, Ubuntu 16.04, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 7.1 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17122 https://security.gentoo.org/glsa/201811-17 https://sourceware.org/bugzilla/show_bug.cgi?id=22508 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d785b7d4b877ed465d04072e17ca19d0f47d840f Common Vulnerability Exposure (CVE) ID: CVE-2017-8421 https://security.gentoo.org/glsa/201709-02 Common Vulnerability Exposure (CVE) ID: CVE-2018-20671 BugTraq ID: 106457 http://www.securityfocus.com/bid/106457 https://sourceware.org/bugzilla/show_bug.cgi?id=24005 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=11fa9f134fd658075c6f74499c780df045d9e9ca SuSE Security Announcement: openSUSE-SU-2019:2415 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html SuSE Security Announcement: openSUSE-SU-2019:2432 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html https://usn.ubuntu.com/4336-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-6543 BugTraq ID: 102985 http://www.securityfocus.com/bid/102985 https://sourceware.org/bugzilla/show_bug.cgi?id=22769 Common Vulnerability Exposure (CVE) ID: CVE-2022-35205 https://sourceware.org/bugzilla/show_bug.cgi?id=29289 Common Vulnerability Exposure (CVE) ID: CVE-2022-47007 https://sourceware.org/bugzilla/show_bug.cgi?id=29254 Common Vulnerability Exposure (CVE) ID: CVE-2022-47008 https://sourceware.org/bugzilla/show_bug.cgi?id=29255%20 Common Vulnerability Exposure (CVE) ID: CVE-2022-47010 https://sourceware.org/bugzilla/show_bug.cgi?id=29262 Common Vulnerability Exposure (CVE) ID: CVE-2022-47011 https://sourceware.org/bugzilla/show_bug.cgi?id=29261 Common Vulnerability Exposure (CVE) ID: CVE-2022-48063 https://sourceware.org/bugzilla/show_bug.cgi?id=29924 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.