Fix of 36 CVEs

2021-12-2716:08:07

repo.cloudlinux.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.026 Low

EPSS

Percentile

90.3%

JSON

CVE-2018-6323: Fix unsigned integer overflow
CVE-2018-19931: Fix heap-based buffer overflow in bfd_elf32_swap_phdr_in
CVE-2018-6543: Fix integer overflow
CVE-2018-20671: Fix integer overflow vulnerability
CVE-2018-6759: Fix segmentation fault
CVE-2018-7208: Fix segmentation fault
CVE-2018-7568: Fix integer overflow
CVE-2018-7569: Fix integer underflow or overflow
CVE-2018-7642: Fix aout_32_swap_std_reloc_out NULL pointer dereference
CVE-2018-7643: Fix integer overflow
CVE-2018-8945: Fix segmentation fault
CVE-2018-13033: Fix excessive memory allocation
CVE-2018-10373: Fix NULL pointer dereference
CVE-2018-10535: Fix NULL pointer dereference
CVE-2018-18309: Fix invalid memory address dereference
CVE-2018-18605: Fix mishandles section merges
CVE-2018-18606: Fix NULL pointer dereference
CVE-2018-18607: Fix NULL pointer dereference in elf_link_input_bfd
CVE-2018-19932: Fix integer overflow and infinite loop
CVE-2018-20002: Fix memory consumption
CVE-2018-20623: Fix use-after-free in the error function
CVE-2018-1000876: Fix integer overflow trigger heap overflow
CVE-2019-9073: Fix excessive memory allocation
CVE-2019-9075: Fix heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap
CVE-2019-9077: Fix heap-based buffer overflow in process_mips_specific
CVE-2019-12972: Fix heap-based buffer over-read in _bfd_doprnt
CVE-2019-14444: Fix integer overflow
CVE-2019-17450: Fix infinite recursion
CVE-2016-2226: Fix integer overflow in the string_appends function in cplus-dem.c
CVE-2016-4487: Fix use-after-free vulnerability in libiberty
CVE-2016-4488: Fix use-after-free vulnerability in libiberty
CVE-2016-4489: Fix integer overflow in libiberty
CVE-2016-4490: Fix integer overflow in cp-demangle.c in libiberty
CVE-2016-4492: Fix buffer overflow in the do_type function in cplus-dem.c in libiberty
CVE-2016-4493: Fix out-of-bounds read in demangle_template_value_parm and do_hpacc_template_literal
CVE-2016-6131: Fix infinite loop, stack overflow

OSVersionArchitecturePackageVersionFilename
Centos6x86_64binutils< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm
Centos6x86_64binutils-devel< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm
Centos6i686binutils-devel< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm

OS	Version	Architecture	Package	Version	Filename
Centos	6	x86_64	binutils	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm
Centos	6	x86_64	binutils-devel	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm
Centos	6	i686	binutils-devel	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els3.src.rpm