Search for packages
Package details: pkg:deb/ubuntu/binutils@2.34-6ubuntu1.1
purl pkg:deb/ubuntu/binutils@2.34-6ubuntu1.1
Next non-vulnerable version 2.34-6ubuntu1.3
Latest non-vulnerable version 2.34-6ubuntu1.3
Risk 3.2
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-eb7h-p6z2-aaan
Aliases:
CVE-2020-16592
A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
2.34-6ubuntu1.3
Affected by 0 other vulnerabilities.
VCID-r4yx-jctz-aaan
Aliases:
CVE-2021-3487
Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt
2.34-6ubuntu1.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-565w-hvaz-aaag The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm. CVE-2018-20673

Date Actor Action Vulnerability Source VulnerableCode Version