Patchwire CVEs, their patch status, and feeds to follow them

CVE-2019-14250

Fixed in a distro release EPSS 2%

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Published 2019-07-24 · CVE record · OSV

Products: gnu binutils, canonical ubuntu_linux, opensuse leap

Distro releases

ReleasePackageFixed in
Debian 12binutils2.33-1
Debian 13binutils2.33-1
Debian 14binutils2.33-1
SUSE Enterprise Storage 5gcc99.2.1+r275327-1.3.9
SUSE HPE Helion OpenStack 8binutils2.37-9.39.1
SUSE HPE Helion OpenStack 8gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise High Performance Computing 15-ESPOSbinutils2.35.1-6.15.1
SUSE Linux Enterprise High Performance Computing 15-LTSSbinutils2.35.1-6.15.1
SUSE Linux Enterprise Module for Basesystem 15gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Basesystem 15gcc99.2.1+r275327-1.3.7
SUSE Linux Enterprise Module for Basesystem 15 SP1binutils2.35-7.11.1
SUSE Linux Enterprise Module for Basesystem 15 SP1gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Basesystem 15 SP1gcc99.2.1+r275327-1.3.7
SUSE Linux Enterprise Module for Basesystem 15 SP2binutils2.35-7.11.1
SUSE Linux Enterprise Module for Development Tools 15cross-nvptx-gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Development Tools 15gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Development Tools 15gcc99.2.1+r275327-1.3.7
SUSE Linux Enterprise Module for Development Tools 15 SP1binutils2.35-7.11.1
SUSE Linux Enterprise Module for Development Tools 15 SP1cross-nvptx-gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Development Tools 15 SP1gcc77.4.1+r275405-4.9.2
SUSE Linux Enterprise Module for Development Tools 15 SP1gcc99.2.1+r275327-1.3.7
SUSE Linux Enterprise Module for Development Tools 15 SP2binutils2.35-7.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP1binutils2.35-7.11.1
SUSE Linux Enterprise Module for Package Hub 15 SP2binutils2.35-7.11.1
SUSE Linux Enterprise Module for Toolchain 12cross-nvptx-gcc77.5.0+r278197-13.1
SUSE Linux Enterprise Module for Toolchain 12gcc77.5.0+r278197-13.1
SUSE Linux Enterprise Module for Toolchain 12gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP1-LTSSgcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP2-BCLbinutils2.37-9.39.1
SUSE Linux Enterprise Server 12 SP2-BCLgcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP2-LTSSgcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP3-BCLbinutils2.37-9.39.1
SUSE Linux Enterprise Server 12 SP3-BCLgcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP3-LTSSbinutils2.37-9.39.1
SUSE Linux Enterprise Server 12 SP3-LTSSgcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP4gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 12 SP4-LTSSbinutils2.37-9.39.1
SUSE Linux Enterprise Server 12 SP5binutils2.37-9.39.1
SUSE Linux Enterprise Server 12 SP5gcc484.8.5-31.26.1
SUSE Linux Enterprise Server 12 SP5gcc77.5.0+r278197-13.1
SUSE Linux Enterprise Server 12 SP5gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server 15-LTSSbinutils2.35.1-6.15.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server for SAP Applications 12 SP2gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server for SAP Applications 12 SP3binutils2.37-9.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server for SAP Applications 12 SP4binutils2.37-9.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP4gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server for SAP Applications 12 SP5binutils2.37-9.39.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5gcc484.8.5-31.26.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5gcc77.5.0+r278197-13.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5gcc99.2.1+r275327-1.3.9
SUSE Linux Enterprise Server for SAP Applications 15binutils2.35.1-6.15.1
SUSE Linux Enterprise Software Development Kit 12 SP5binutils2.37-9.39.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-ppc-binutils2.37-9.39.1
SUSE Linux Enterprise Software Development Kit 12 SP5cross-spu-binutils2.37-9.39.1
SUSE Linux Enterprise Software Development Kit 12 SP5gcc484.8.5-31.26.1
SUSE Linux Enterprise Software Development Kit 12 SP5libffi484.8.5-31.26.1
SUSE Linux Enterprise Software Development Kit 12 SP5libgcj484.8.5-31.26.1
SUSE Linux Enterprise Workstation Extension 12 SP5libgcj484.8.5-31.26.1
SUSE OpenStack Cloud 7gcc99.2.1+r275327-1.3.9
SUSE OpenStack Cloud 8binutils2.37-9.39.1
SUSE OpenStack Cloud 8gcc99.2.1+r275327-1.3.9
SUSE OpenStack Cloud 9binutils2.37-9.39.1
SUSE OpenStack Cloud Crowbar 8binutils2.37-9.39.1
SUSE OpenStack Cloud Crowbar 8gcc99.2.1+r275327-1.3.9
SUSE OpenStack Cloud Crowbar 9binutils2.37-9.39.1
Ubuntu 16.04 LTSlibiberty20160215-1ubuntu0.3
Ubuntu 18.04 LTSbinutils2.30-21ubuntu1~18.04.3
Ubuntu 18.04 LTSlibiberty20170913-1ubuntu0.1
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1
openSUSE Leap 15.0gcc77.4.1+r275405-lp150.12.1
openSUSE Leap 15.1binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-aarch64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-arm-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-avr-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-epiphany-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-hppa-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-hppa64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-i386-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-ia64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-m68k-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-mips-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-nvptx-gcc99.3.1+git1296-lp151.2.1
openSUSE Leap 15.1cross-ppc-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-ppc64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-ppc64le-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-riscv64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-rx-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-s390-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-s390x-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-sparc-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-sparc64-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1cross-spu-binutils2.35-lp151.3.9.1
openSUSE Leap 15.1gcc77.4.1+r275405-lp151.2.6.1
openSUSE Leap 15.1gcc99.3.1+git1296-lp151.2.2
openSUSE Leap 15.2binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-aarch64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-arm-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-avr-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-epiphany-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-hppa-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-hppa64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-i386-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-ia64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-m68k-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-mips-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-ppc-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-ppc64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-ppc64le-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-riscv64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-rx-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-s390-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-s390x-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-sparc-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-sparc64-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-spu-binutils2.35-lp152.4.3.1
openSUSE Leap 15.2cross-xtensa-binutils2.35-lp152.4.3.1
openSUSE Tumbleweedbinutils2.37-1.3
openSUSE Tumbleweedgcc77.5.0+r278197-10.1