Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-19931

Fixed in a distro release EPSS 2%

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.

Published 2018-12-07 · CVE record · OSV

Products: gnu binutils, netapp vasa_provider, canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Alpine 3.10binutils2.32-r0
Alpine 3.11binutils2.32-r0
Alpine 3.12binutils2.32-r0
Alpine 3.13binutils2.32-r0
Alpine 3.14binutils2.32-r0
Alpine 3.15binutils2.32-r0
Alpine 3.16binutils2.32-r0
Alpine 3.17binutils2.32-r0
Alpine 3.18binutils2.32-r0
Alpine 3.19binutils2.32-r0
Alpine 3.20binutils2.32-r0
Alpine 3.21binutils2.32-r0
Alpine 3.22binutils2.32-r0
Alpine 3.23binutils2.32-r0
Alpine 3.24binutils2.32-r0
Arch Linuxbinutils2.32-1
Debian 12binutils2.32.51.20190707-1
Debian 13binutils2.32.51.20190707-1
Debian 14binutils2.32.51.20190707-1
SUSE Enterprise Storage 4binutils2.32-9.33.1
SUSE Enterprise Storage 5binutils2.32-9.33.1
SUSE HPE Helion OpenStack 8binutils2.32-9.33.1
SUSE Linux Enterprise Desktop 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Module for Basesystem 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Basesystem 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Module for Development Tools 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Development Tools 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Module for Package Hub 15binutils2.32-6.8.1
SUSE Linux Enterprise Module for Package Hub 15 SP1binutils2.32-7.5.1
SUSE Linux Enterprise Server 12 SP1-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP2-BCLbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP2-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP3-BCLbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP3-LTSSbinutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Server 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4cross-ppc-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP4cross-spu-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-ppc-binutils2.32-9.33.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-spu-binutils2.32-9.33.1
SUSE OpenStack Cloud 7binutils2.32-9.33.1
SUSE OpenStack Cloud 8binutils2.32-9.33.1
SUSE OpenStack Cloud Crowbar 8binutils2.32-9.33.1
Ubuntu 18.04 LTSbinutils2.30-21ubuntu1~18.04.3
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1
openSUSE Leap 15.0binutils2.32-lp150.10.1
openSUSE Leap 15.1binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-aarch64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-arm-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-avr-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-epiphany-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-hppa-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-hppa64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-i386-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ia64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-m68k-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-mips-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-ppc64le-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-riscv64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-rx-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-s390-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-s390x-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-sparc-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-sparc64-binutils2.32-lp151.3.3.1
openSUSE Leap 15.1cross-spu-binutils2.32-lp151.3.3.1
openSUSE Tumbleweedbinutils2.37-1.3