Integer overflow in Binutils - CVE-2019-14250

Vulnerability identifier: #VU19616

CSH Severity: Medium

CVSS v4: 7.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-14250

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow in simple_object_elf_match() function in simple-object-elf.c. A remote attacker can use a specially crFted ELF file to trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Binutils
Gentoo Linux
SUSE OpenStack Cloud Crowbar
HPE Helion Openstack
SUSE OpenStack Cloud
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Desktop
Opensuse
Dell EMC Container Storage Modules
cross-spu-binutils-debugsource
binutils
binutils-debuginfo
binutils-debugsource
binutils-devel
libctf-nobfd0
libctf-nobfd0-debuginfo
libctf0
binutils-gold
binutils-gold-debuginfo
cross-ppc-binutils
cross-ppc-binutils-debuginfo
cross-ppc-binutils-debugsource
cross-spu-binutils
cross-spu-binutils-debuginfo
libctf0-debuginfo
gcc48-gij-32bit
gcc48-ada
gcc48-ada-debuginfo
libada48
libada48-debuginfo
cpp48
cpp48-debuginfo
gcc48-32bit
libstdc++48-devel-32bit
libasan0-32bit
libasan0
libasan0-debuginfo
gcc48-info
gcc48-java-debuginfo
gcc48-gij
gcc48-gij-debuginfo-32bit
gcc48-gij-debuginfo
libgcj48-32bit
libgcj48
libgcj48-debuginfo-32bit
libgcj48-debuginfo
libgcj48-debugsource
libgcj48-jar
libgcj_bc1
gcc48-debuginfo
gcc48-debugsource
gcc48-fortran
gcc48-fortran-debuginfo
gcc48-java
libstdc++48-devel
gcc48-obj-c++
gcc48-obj-c++-debuginfo
gcc48-objc
gcc48-objc-debuginfo
libffi48-debugsource
libffi48-devel
libgcj48-devel
libgcj48-devel-debuginfo
gcc48-objc-32bit
gcc48
gcc48-c++
gcc48-c++-debuginfo
gcc48-locale
PowerProtect Data Domain

Install update from vendor's website.

Binutils - update to 2.33.1
Dell EMC Container Storage Modules - update to 1.7.0
cross-spu-binutils-debugsource - update to 2.37-9.39.1
binutils - update to 2.37-9.39.1
binutils-debuginfo - update to 2.37-9.39.1
binutils-debugsource - update to 2.37-9.39.1
binutils-devel - update to 2.37-9.39.1
libctf-nobfd0 - update to 2.37-9.39.1
libctf-nobfd0-debuginfo - update to 2.37-9.39.1
libctf0 - update to 2.37-9.39.1
binutils-gold - update to 2.37-9.39.1
binutils-gold-debuginfo - update to 2.37-9.39.1
cross-ppc-binutils - update to 2.37-9.39.1
cross-ppc-binutils-debuginfo - update to 2.37-9.39.1
cross-ppc-binutils-debugsource - update to 2.37-9.39.1
cross-spu-binutils - update to 2.37-9.39.1
cross-spu-binutils-debuginfo - update to 2.37-9.39.1
libctf0-debuginfo - update to 2.37-9.39.1
gcc48-gij-32bit - update to 4.8.5-31.26.1
gcc48-ada - update to 4.8.5-31.26.1
gcc48-ada-debuginfo - update to 4.8.5-31.26.1
libada48 - update to 4.8.5-31.26.1
libada48-debuginfo - update to 4.8.5-31.26.1
cpp48 - update to 4.8.5-31.26.1
cpp48-debuginfo - update to 4.8.5-31.26.1
gcc48-32bit - update to 4.8.5-31.26.1
libstdc++48-devel-32bit - update to 4.8.5-31.26.1
libasan0-32bit - update to 4.8.5-31.26.1
libasan0 - update to 4.8.5-31.26.1
libasan0-debuginfo - update to 4.8.5-31.26.1
gcc48-info - update to 4.8.5-31.26.1
gcc48-java-debuginfo - update to 4.8.5-31.26.1
gcc48-gij - update to 4.8.5-31.26.1
gcc48-gij-debuginfo-32bit - update to 4.8.5-31.26.1
gcc48-gij-debuginfo - update to 4.8.5-31.26.1
libgcj48-32bit - update to 4.8.5-31.26.1
libgcj48 - update to 4.8.5-31.26.1
libgcj48-debuginfo-32bit - update to 4.8.5-31.26.1
libgcj48-debuginfo - update to 4.8.5-31.26.1
libgcj48-debugsource - update to 4.8.5-31.26.1
libgcj48-jar - update to 4.8.5-31.26.1
libgcj_bc1 - update to 4.8.5-31.26.1
gcc48-debuginfo - update to 4.8.5-31.26.1
gcc48-debugsource - update to 4.8.5-31.26.1
gcc48-fortran - update to 4.8.5-31.26.1
gcc48-fortran-debuginfo - update to 4.8.5-31.26.1
gcc48-java - update to 4.8.5-31.26.1
libstdc++48-devel - update to 4.8.5-31.26.1
gcc48-obj-c++ - update to 4.8.5-31.26.1
gcc48-obj-c++-debuginfo - update to 4.8.5-31.26.1
gcc48-objc - update to 4.8.5-31.26.1
gcc48-objc-debuginfo - update to 4.8.5-31.26.1
libffi48-debugsource - update to 4.8.5-31.26.1
libffi48-devel - update to 4.8.5-31.26.1
libgcj48-devel - update to 4.8.5-31.26.1
libgcj48-devel-debuginfo - update to 4.8.5-31.26.1
gcc48-objc-32bit - update to 4.8.5-31.26.1
gcc48 - update to 4.8.5-31.26.1
gcc48-c++ - update to 4.8.5-31.26.1
gcc48-c++-debuginfo - update to 4.8.5-31.26.1
gcc48-locale - update to 4.8.5-31.26.1
PowerProtect Data Domain - addressed in versions 7.7.4, 7.10.0.0

• http://www.securityfocus.com/bid/109354
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90924
• https://gcc.gnu.org/ml/gcc-patches/2019-07/msg01003.html

• Multiple vulnerabilities in GNU Binutils
• OpenSUSE Linux update for gcc9
• OpenSUSE Linux update for gcc7
• OpenSUSE Linux update for gcc7
• Gentoo update for Binutils
• OpenSUSE Linux update for binutils
• OpenSUSE Linux update for binutils
• SUSE update for gcc48
• Multiple vulnerabilities in Dell Technologies PowerProtect DD
• Multiple vulnerabilities in Dell Container Storage Modules
• SUSE update for binutils