The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4336-2 advisory.

    USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update     for Ubuntu 16.04 ESM.



Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-361:08 advisory.

    * binutils: integer overflow leading to a SEGV in
    _bfd_dwarf2_find_nearest_line in dwarf2.c (CVE-2019-17451)
      * binutils: Improper Input Validation, Signed/Unsigned Comparison,     Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial     of service (CVE-2019-1010204)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the binutils packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - find_abstract_instance in dwarf2.c in the Binary File     Descriptor (BFD) library (aka libbfd), as distributed     in GNU Binutils 2.32, allows remote attackers to cause     a denial of service (infinite recursion and application     crash) via a crafted ELF file.(CVE-2019-17450)

  - An issue was discovered in the Binary File Descriptor     (BFD) library (aka libbfd), as distributed in GNU     Binutils 2.32. It is an integer overflow leading to a     SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c, as     demonstrated by nm.(CVE-2019-17451)

  - A flaw exists in binutils in bfd/pef.c. An attacker who     is able to submit a crafted PEF file to be parsed by     objdump could cause a heap buffer overflow ->     out-of-bounds read that could lead to an impact to     application availability. This flaw affects binutils     versions prior to 2.34.(CVE-2020-35493)

  - There's a flaw in binutils /opcodes/tic4x-dis.c. An     attacker who is able to submit a crafted input file to     be processed by binutils could cause usage of     uninitialized memory. The highest threat is to     application availability with a lower threat to data     confidentiality. This flaw affects binutils versions     prior to 2.34.(CVE-2020-35494)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202007-39 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the CVE identifiers referenced below for details.
  Impact :

    Please review the referenced CVE identifiers for details.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1797 advisory.

    The binutils packages provide a collection of binary utilities for the manipulation of object code in     various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf,     size, strings, strip, and addr2line utilities.

    Security Fix(es):

    * binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c     (CVE-2019-17451)

    * binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc     and elfcpp/elfcpp_file.h leads to denial of service (CVE-2019-1010204)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.2 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
151919	Ubuntu 16.04 ESM : GNU binutils vulnerabilities (USN-4336-2)	Nessus	Ubuntu Local Security Checks	2021/7/21	2024/10/29	critical
294100	MiracleLinux 8 : binutils-2.30-75.el8 (AXSA:2020-361:08)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	medium
146710	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2021-1282)	Nessus	Huawei Local Security Checks	2021/2/22	2024/1/19	medium
138962	GLSA-202007-39 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/7/27	2024/2/28	medium
136054	RHEL 8 : binutils (RHSA-2020:1797)	Nessus	Red Hat Local Security Checks	2020/4/28	2025/3/19	medium

检测

插件搜索

critical

medium

medium

medium

medium