high7.8
CVE-2019-9075
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32.
Impact
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Binutils | Version 2.32 |
| Netapp | Hci Management Node | All versions |
| Netapp | Solidfire | All versions |
| Canonical | Ubuntu Linux | Version 18.04 |
| F5 | Big-Ip Access Policy Manager | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Advanced Firewall Manager | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Analytics | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Application Acceleration Manager | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Application Security Manager | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Domain Name System | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Edge Gateway | Versions 14.1.0, 15.0.0 |
| F5 | Big-Ip Fraud Protection Service | Versions 14.1.0, 15.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html
- https://security.gentoo.org/glsa/202107-24
- https://security.netapp.com/advisory/ntap-20190314-0003/
- https://sourceware.org/bugzilla/show_bug.cgi?id=24236
- https://support.f5.com/csp/article/K42059040
- https://usn.ubuntu.com/4336-1/
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.html
- http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.html
- https://security.gentoo.org/glsa/202107-24
- https://security.netapp.com/advisory/ntap-20190314-0003/
- https://sourceware.org/bugzilla/show_bug.cgi?id=24236
- https://support.f5.com/csp/article/K42059040
- https://usn.ubuntu.com/4336-1/