Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-1000876

Fixed in a distro release EPSS <1%

binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump, bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to be exploitable via Local. This vulnerability appears to have been fixed in after commit 3a551c7a1b80fca579461774860574eabfd7f18f.

Published 2018-12-20 · CVE record · OSV

Products: gnu binutils, canonical ubuntu_linux, redhat enterprise_linux_desktop, redhat enterprise_linux_server, redhat enterprise_linux_workstation

Distro releases

ReleasePackageFixed in
Amazon Linux 2binutils2.29.1-29.amzn2
Amazon Linux 2binutils-devel2.29.1-29.amzn2
Debian 12binutils2.32.51.20190707-1
Debian 13binutils2.32.51.20190707-1
Debian 14binutils2.32.51.20190707-1
Red Hat Enterprise Linux 7binutils0:2.27-41.base.el7
Red Hat Enterprise Linux 7binutils-debuginfo0:2.27-41.base.el7
Red Hat Enterprise Linux 7binutils-devel0:2.27-41.base.el7
SUSE Enterprise Storage 4binutils2.32-9.33.1
SUSE Enterprise Storage 5binutils2.32-9.33.1
SUSE HPE Helion OpenStack 8binutils2.32-9.33.1
SUSE Linux Enterprise Desktop 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Module for Basesystem 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Module for Development Tools 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Development Tools 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Module for Package Hub 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Server 12 SP1-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP2-BCLbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP2-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP3-BCLbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP3-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4cross-ppc-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4cross-spu-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-ppc-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-spu-binutils2.32-9.33.1
SUSE OpenStack Cloud 7binutils2.32-9.33.1
SUSE OpenStack Cloud 8binutils2.32-9.33.1
SUSE OpenStack Cloud Crowbar 8binutils2.32-9.33.1
Ubuntu 18.04 LTSbinutils2.30-21ubuntu1~18.04.3
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1
openSUSE Leap 15.0binutils2.32-lp150.10.1
openSUSE Leap 15.1binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-aarch64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-arm-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-avr-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-epiphany-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-hppa-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-hppa64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-i386-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ia64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-m68k-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-mips-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc64le-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-riscv64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-rx-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-s390-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-s390x-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-sparc-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-sparc64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-spu-binutils2.32-lp151.3.3.1
openSUSE Tumbleweedbinutils2.37-1.3