Patchwire CVEs, their patch status, and feeds to follow them

CVE-2012-3509

Fixed in a distro release EPSS 4%

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.

Published 2012-09-05 · CVE record · OSV

Products: gnu binutils, gnu libiberty, canonical ubuntu_linux, debian_linux

Distro releases

ReleasePackageFixed in
Debian 12binutils2.22-8
Debian 13binutils2.22-8
Debian 14binutils2.22-8
Debian 6.0binutils2.20.1-16+deb6u2
SUSE Linux Enterprise Desktop 11 SP4binutils2.25.0-5.5
SUSE Linux Enterprise Desktop 11 SP4gcc55.2.1+r226025-2.4
SUSE Linux Enterprise Desktop 11 SP4gdb7.9.1-3.2
SUSE Linux Enterprise Server 11 SP4binutils2.25.0-5.5
SUSE Linux Enterprise Server 11 SP4gcc55.2.1+r226025-2.4
SUSE Linux Enterprise Server 11 SP4gdb7.9.1-3.2
SUSE Linux Enterprise Server 11 SP4libffi-gcc55.2.1+r226025-2.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4binutils2.25.0-5.5
SUSE Linux Enterprise Server for SAP Applications 11 SP4gcc55.2.1+r226025-2.4
SUSE Linux Enterprise Server for SAP Applications 11 SP4gdb7.9.1-3.2
SUSE Linux Enterprise Server for SAP Applications 11 SP4libffi-gcc55.2.1+r226025-2.1
SUSE Linux Enterprise Software Development Kit 11 SP4binutils2.25.0-5.5
SUSE Linux Enterprise Software Development Kit 11 SP4cross-ppc-binutils2.25.0-5.7
SUSE Linux Enterprise Software Development Kit 11 SP4cross-spu-binutils2.25.0-5.7
SUSE Linux Enterprise Software Development Kit 11 SP4gcc55.2.1+r226025-2.4
SUSE Linux Enterprise Software Development Kit 11 SP4gdb7.9.1-3.2
SUSE Linux Enterprise Software Development Kit 11 SP4libffi-gcc55.2.1+r226025-2.1
Ubuntu 14.04 LTSbinutils2.24-5ubuntu3.1