CVEvulnerability

CVE-2019-1010204

5.5 MEDIUM Published 2019-07-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-125, CWE-681

Description

GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.

Affected configurations

• gnu binutils (>= 2.21 <= 2.31.1) • gnu binutils gold (>= 1.11 <= 1.16) • netapp hci management node • netapp solidfire

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-681 Incorrect Conversion between Numeric Types weakness

References