CVE-2019-9070 — Out-of-bounds Read in Binutils
Severity
7.8HIGHNVD
EPSS
0.5%
top 36.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 24
Latest updateMay 13
Description
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages3 packages
Also affects: Ubuntu Linux 16.04, 18.04
Patches
🔴Vulnerability Details
3GHSA▶
GHSA-7j27-3j2r-jhhj: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2↗2022-05-13
CVEList▶
CVE-2019-9070: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2↗2019-02-24
OSV▶
CVE-2019-9070: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2↗2019-02-24
📋Vendor Advisories
6Red Hat
▶
Microsoft▶
An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.↗2019-02-12