CVE-2020-35493、CVE-2020-35494、CVE-2020-35495、CVE-2020-35496のバックポートパッチ。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

遠端主機受到 GLSA-202107-24 中所述的弱點影響 (Binutils：多個弱點)

    已在 Binutils 中發現多個弱點。如需詳細資訊，請檢閱下方提及的 CVE 識別碼。
  影響：

    如需詳細資料，請檢閱提及的 CVE 識別碼。
  因應措施：

    目前尚無已知的因應措施。

远程主机受到 GLSA-202107-24 中所述漏洞的影响（Binutils：多个漏洞）

    在 Binutils 中发现多个漏洞。请检查下方引用的 CVE 标识符以了解详细信息。
  影响：

    请查看供参考的 CVE 标识符，了解详细信息。
  变通方案：

    目前无任何已知的变通方案。

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be     processed by the objdump program could cause a null pointer dereference. The greatest threat from this     flaw is to application availability. This flaw affects binutils versions prior to 2.34. (CVE-2020-35495)

  - There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to     2.34. (CVE-2020-35496)

  - There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which     could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL     pointer dereference. The greatest threat of this flaw is to application availability. (CVE-2020-35507)

  - There's a flaw in the BFD library of binutils in versions before 2.36. An attacker who supplies a crafted     file to an application linked with BFD, and using the DWARF functionality, could cause an impact to system     availability by way of excessive memory consumption. (CVE-2021-3487)

  - An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this     flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in     some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system     availability. (CVE-2021-3549)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202107-24 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

An update of the binutils package has been released.

According to the versions of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - A Null Pointer Dereference vulnerability exists in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.34, in     debug_get_real_type, as demonstrated in objdump, that     can cause a denial of service via a crafted     file.(CVE-2020-16598)

  - A use after free issue exists in the Binary File     Descriptor (BFD) library (aka libbfd) in GNU Binutils     2.34 in bfd_hash_lookup, as demonstrated in nm-new,     that can cause a denial of service via a crafted     file.(CVE-2020-16592)

  - A flaw was found in binutils. An attacker who is able     to submit a crafted input file to be processed by the     objdump program could cause a null pointer dereference.
    The greatest threat from this flaw is to application     availability.(CVE-2020-35495)

  - A flaw was found in binutils. An attacker who is able     to submit a crafted input file to be processed by     binutils could cause usage of uninitialized memory. The     highest threat is to application availability with a     lower threat to data confidentiality.(CVE-2020-35494)

  - A flaw was found in Binutils in bfd/pef.c. This flaw     allows an attacker who can submit a crafted PEF file to     be parsed by objdump to cause a heap buffer overflow,     leading to an out-of-bounds read. The highest threat     from this vulnerability is to system     availability.(CVE-2020-35493)

  - A flaw was found in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability.(CVE-2020-35507)

  - A flaw was found in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability.(CVE-2020-35496)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the bindutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - find_abstract_instance in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.32, allows remote attackers to cause     a denial of service (infinite recursion and application     crash) via a crafted ELF file.(CVE-2019-17450)

  - A use after free issue exists in the Binary File     Descriptor (BFD) library (aka libbfd) in GNU Binutils     2.34 in bfd_hash_lookup, as demonstrated in nm-new,     that can cause a denial of service via a crafted     file.(CVE-2020-16592)

  - A flaw exists in binutils in bfd/pef.c. An attacker who     is able to submit a crafted PEF file to be parsed by     objdump could cause a heap buffer overflow ->     out-of-bounds read that could lead to an impact to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35493)

  - There's a flaw in binutils /opcodes/tic4x-dis.c. An     attacker who is able to submit a crafted input file to     be processed by binutils could cause usage of     uninitialized memory. The highest threat is to     application availability with a lower threat to data     confidentiality. This flaw affects binutils versions     prior to 2.34.(CVE-2020-35494)

  - There's a flaw in binutils /opcodes/tic4x-dis.c. An     attacker who is able to submit a crafted input file to     be processed by binutils could cause usage of     uninitialized memory. The highest threat is to     application availability with a lower threat to data     confidentiality. This flaw affects binutils versions     prior to 2.34.(CVE-2020-35494)

  - There's a flaw in binutils /bfd/pef.c. An attacker who     is able to submit a crafted input file to be processed     by the objdump program could cause a null pointer     dereference. The greatest threat from this flaw is to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35495)

  - There's a flaw in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35496)

  - There's a flaw in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils in versions prior to 2.34 which     could allow an attacker who is able to submit a crafted     file to be processed by objdump to cause a NULL pointer     dereference. The greatest threat of this flaw is to     application availability.(CVE-2020-35507)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - find_abstract_instance in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.32, allows remote attackers to cause     a denial of service (infinite recursion and application     crash) via a crafted ELF file.(CVE-2019-17450)

  - There's a flaw in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35496)

  - There's a flaw in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35507)

  - A flaw exists in binutils in bfd/pef.c. An attacker who     is able to submit a crafted PEF file to be parsed by     objdump could cause a heap buffer overflow ->     out-of-bounds read that could lead to an impact to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35493)

  - There's a flaw in binutils /opcodes/tic4x-dis.c. An     attacker who is able to submit a crafted input file to     be processed by binutils could cause usage of     uninitialized memory. The highest threat is to     application availability with a lower threat to data     confidentiality. This flaw affects binutils versions     prior to 2.34.(CVE-2020-35494)

  - There's a flaw in binutils /bfd/pef.c. An attacker who     is able to submit a crafted input file to be processed     by the objdump program could cause a null pointer     dereference. The greatest threat from this flaw is to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35495)

  - A Null Pointer Dereference vulnerability exists in the     Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.34, in     debug_get_real_type, as demonstrated in objdump, that     can cause a denial of service via a crafted     file.(CVE-2020-16598)

  - A use after free issue exists in the Binary File     Descriptor (BFD) library (aka libbfd) in GNU Binutils     2.34 in bfd_hash_lookup, as demonstrated in nm-new,     that can cause a denial of service via a crafted     file.(CVE-2020-16592)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Null Pointer Dereference in debug_get_real_type could     result in DoS(CVE-2020-16598)

  - A use after free issue exists in the Binary File     Descriptor (BFD) library (aka libbfd) in GNU Binutils     2.34 in bfd_hash_lookup, as demonstrated in nm-new,     that can cause a denial of service via a crafted     file.(CVE-2020-16592)

  - There's a flaw in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35507)

  - A flaw exists in binutils in bfd/pef.c. An attacker who     is able to submit a crafted PEF file to be parsed by     objdump could cause a heap buffer overflow ->     out-of-bounds read that could lead to an impact to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35493)

  - There's a flaw in binutils /opcodes/tic4x-dis.c. An     attacker who is able to submit a crafted input file to     be processed by binutils could cause usage of     uninitialized memory. The highest threat is to     application availability with a lower threat to data     confidentiality. This flaw affects binutils versions     prior to 2.34.(CVE-2020-35494)

  - There's a flaw in binutils /bfd/pef.c. An attacker who     is able to submit a crafted input file to be processed     by the objdump program could cause a null pointer     dereference. The greatest threat from this flaw is to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35495)

  - There's a flaw in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35496)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - A flaw was found in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability.(CVE-2020-35507)

  - A flaw was found in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability.(CVE-2020-35496)

  - A flaw was found in binutils. An attacker who is able     to submit a crafted input file to be processed by the     objdump program could cause a null pointer dereference.
    The greatest threat from this flaw is to application     availability.(CVE-2020-35495)

  - There's a flaw in the BFD library of binutils. An     attacker who supplies a crafted file to an application     linked with BFD, and using the DWARF functionality,     could cause an impact to system availability by way of     excessive memory consumption.(CVE-2021-3487)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - binutils: heap-based buffer overflow in finish_stab in stabs.c (CVE-2018-12699)

  - binutils version 2.32 and earlier contains a Integer Overflow vulnerability in objdump,     bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc that can result in Integer overflow     trigger heap overflow. Successful exploitation allows execution of arbitrary code.. This attack appear to     be exploitable via Local. This vulnerability appears to have been fixed in after commit     3a551c7a1b80fca579461774860574eabfd7f18f. (CVE-2018-1000876)

  - The ignore_section_sym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.30, does not validate the output_section pointer in the case of a symtab     entry with a SECTION type that has a 0 value, which allows remote attackers to cause a denial of     service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
    (CVE-2018-10535)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

Backport patches for CVE-2020-35493, CVE-2020-35494, CVE-2020-35495, CVE-2020-35496.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - There's a flaw in binutils /bfd/pef.c. An attacker who     is able to submit a crafted input file to be processed     by the objdump program could cause a null pointer     dereference. The greatest threat from this flaw is to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35495)

  - There's a flaw in bfd_pef_scan_start_address() of     bfd/pef.c in binutils which could allow an attacker who     is able to submit a crafted file to be processed by     objdump to cause a NULL pointer dereference. The     greatest threat of this flaw is to application     availability. This flaw affects binutils versions prior     to 2.34.(CVE-2020-35496)

  - There's a flaw in bfd_pef_parse_function_stubs of     bfd/pef.c in binutils in versions prior to 2.34 which     could allow an attacker who is able to submit a crafted     file to be processed by objdump to cause a NULL pointer     dereference. The greatest threat of this flaw is to     application availability.(CVE-2020-35507)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名稱	產品	系列	已發布	已更新	嚴重性
144828	Fedora 32：mingw-binutils（2020-28c78a6ac3）	Nessus	Fedora Local Security Checks	2021/1/11	2024/1/30	medium
157002	GLSA-202107-24：Binutils：多個弱點	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
157002	GLSA-202107-24：Binutils：多个漏洞	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
156515	EulerOS Virtualization 3.0.2.6 : binutils (EulerOS-SA-2021-2903)	Nessus	Huawei Local Security Checks	2022/1/6	2023/11/21	high
157002	GLSA-202107-24 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2022/1/24	2023/12/21	high
146864	Photon OS 1.0: Binutils PHSA-2021-1.0-0362	Nessus	PhotonOS Local Security Checks	2021/2/25	2024/1/19	medium
147036	EulerOS Virtualization for ARM 64 3.0.6.0 : binutils (EulerOS-SA-2021-1580)	Nessus	Huawei Local Security Checks	2021/3/4	2024/1/16	medium
151388	EulerOS Virtualization 3.0.2.2 : bindutils (EulerOS-SA-2021-2128)	Nessus	Huawei Local Security Checks	2021/7/6	2023/12/11	medium
147456	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2021-1388)	Nessus	Huawei Local Security Checks	2021/3/10	2024/1/11	medium
145773	EulerOS 2.0 SP8 : binutils (EulerOS-SA-2021-1135)	Nessus	Huawei Local Security Checks	2021/2/1	2024/1/25	medium
151259	EulerOS Virtualization 3.0.6.6 : binutils (EulerOS-SA-2021-2045)	Nessus	Huawei Local Security Checks	2021/7/1	2023/12/11	medium
200030	RHEL 8 : binutils (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	critical
144828	Fedora 32 : mingw-binutils (2020-28c78a6ac3)	Nessus	Fedora Local Security Checks	2021/1/11	2024/1/30	medium
146775	Photon OS 3.0: Binutils PHSA-2021-3.0-0196	Nessus	PhotonOS Local Security Checks	2021/2/23	2024/1/19	medium
146876	Photon OS 2.0: Binutils PHSA-2021-2.0-0321	Nessus	PhotonOS Local Security Checks	2021/2/27	2024/1/18	medium
149585	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2021-1895)	Nessus	Huawei Local Security Checks	2021/5/18	2024/1/1	medium

偵測

搜尋 Plugin

medium

high

high

high

high

medium

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium