{"schemaVersion":3,"id":"USN-2496-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"binutils vulnerabilities\n\nMichal Zalewski discovered that the setup_group function in libbfd in\nGNU binutils did not properly check group headers in ELF files. An\nattacker could use this to craft input that could cause a denial\nof service (application crash) or possibly execute arbitrary code.\n(CVE-2014-8485)\n\nHanno Böck discovered that the _bfd_XXi_swap_aouthdr_in function\nin libbfd in GNU binutils allowed out-of-bounds writes. An\nattacker could use this to craft input that could cause a denial\nof service (application crash) or possibly execute arbitrary code.\n(CVE-2014-8501)\n\nHanno Böck discovered a heap-based buffer overflow in the\npe_print_edata function in libbfd in GNU binutils. An attacker\ncould use this to craft input that could cause a denial of service\n(application crash) or possibly execute arbitrary code. (CVE-2014-8502)\n\nAlexander Cherepanov discovered multiple directory traversal\nvulnerabilities in GNU binutils. An attacker could use this to craft\ninput that could delete arbitrary files. (CVE-2014-8737)\n\nAlexander Cherepanov discovered the _bfd_slurp_extended_name_table\nfunction in libbfd in GNU binutils allowed invalid writes when handling\nextended name tables in an archive. An attacker could use this to\ncraft input that could cause a denial of service (application crash)\nor possibly execute arbitrary code. (CVE-2014-8738)\n\nHanno Böck discovered a stack-based buffer overflow in the ihex_scan\nfunction in libbfd in GNU binutils. An attacker could use this\nto craft input that could cause a denial of service (application\ncrash). (CVE-2014-8503)\n\nMichal Zalewski discovered a stack-based buffer overflow in the\nsrec_scan function in libbfd in GNU binutils. An attacker could\nuse this to to craft input that could cause a denial of service\n(application crash); the GNU C library's Fortify Source printf\nprotection should prevent the possibility of executing arbitrary code.\n(CVE-2014-8504)\n\nMichal Zalewski discovered that the srec_scan function in libbfd\nin GNU binutils allowed out-of-bounds reads. An attacker could\nuse this to craft input to cause a denial of service. This issue\nonly affected Ubuntu 14.04 LTS, Ubuntu 12.04 LTS, and Ubuntu 10.04\nLTS. (CVE-2014-8484)\n\nSang Kil Cha discovered multiple integer overflows in the\n_objalloc_alloc function and objalloc_alloc macro in binutils. This\ncould allow an attacker to cause a denial of service (application\ncrash). This issue only affected Ubuntu 12.04 LTS and Ubuntu 10.04 LTS.\n(CVE-2012-3509)\n\nAlexander Cherepanov and Hanno Böck discovered multiple additional\nout-of-bounds reads and writes in GNU binutils. An attacker could use\nthese to craft input that could cause a denial of service (application\ncrash) or possibly execute arbitrary code. A few of these issues may\nbe limited in exposure to a denial of service (application abort)\nby the GNU C library's Fortify Source printf protection.\n\nThe strings(1) utility in GNU binutils used libbfd by default when\nexamining executable object files; unfortunately, libbfd was not\noriginally developed with the expectation of hostile input. As\na defensive measure, the behavior of strings has been changed to\ndefault to 'strings --all' behavior, which does not use libbfd; use\nthe new argument to strings, '--data', to recreate the old behavior.","dates":{"published":"2015-02-09T21:39:27.000Z","modified":"2026-04-22T09:08:21.040Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"binutils","name":"binutils","label":"binutils","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/binutils","purlType":"deb","versions":[{"text":"< 2.24-5ubuntu3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.24-5ubuntu3.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-2496-1","label":"ubuntu.com/security/notices/USN-2496-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2012-3509","label":"ubuntu.com/security/CVE-2012-3509","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8484","label":"ubuntu.com/security/CVE-2014-8484","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8485","label":"ubuntu.com/security/CVE-2014-8485","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8501","label":"ubuntu.com/security/CVE-2014-8501","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8502","label":"ubuntu.com/security/CVE-2014-8502","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8503","label":"ubuntu.com/security/CVE-2014-8503","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8504","label":"ubuntu.com/security/CVE-2014-8504","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8737","label":"ubuntu.com/security/CVE-2014-8737","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2014-8738","label":"ubuntu.com/security/CVE-2014-8738","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2012-3509","CVE-2014-8484","CVE-2014-8485","CVE-2014-8501","CVE-2014-8502","CVE-2014-8503","CVE-2014-8504","CVE-2014-8737","CVE-2014-8738"],"downstream":[],"duplicates":[],"related":["CVE-2012-3509","CVE-2014-8484","CVE-2014-8485","CVE-2014-8501","CVE-2014-8502","CVE-2014-8503","CVE-2014-8504","CVE-2014-8737","CVE-2014-8738"]},"timeline":[{"kind":"published","date":"2015-02-09T21:39:27.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-04-22T09:08:21.040Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:12:58.138Z","stale":false,"partial":false}}