[ GLSA 201801-01 ] Binutils

[GLSA]

Gentoo Linux Security Advisory

Title: Binutils: Multiple vulnerabilities (GLSA 201801-01)
Severity: normal
Exploitable: local, remote
Date: 2018-01-07
Bug(s): #624700, #627516, #628538, #629344, #629922, #631324, #632100, #632132, #632384, #632668, #633988, #635218, #635692, #635860, #635968
ID: 201801-01

Synopsis

Multiple vulnerabilities have been found in Binutils, the worst of
which may allow remote attackers to cause a Denial of Service condition.


Background

The GNU Binutils are a collection of tools to create, modify and analyse
binary files. Many of the files use BFD, the Binary File Descriptor
library, to do low-level manipulation.


Affected Packages

Package: sys-devel/binutils
Vulnerable: < 2.29.1-r1
Unaffected: >= 2.29.1-r1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Binutils. Please review
the referenced CVE identifiers for details.


Impact

A remote attacker, by enticing a user to compile/execute a specially
crafted ELF, tekhex, PE, or binary file, could possibly cause a Denial of
Service condition.


Workaround

There are no known workarounds at this time.

Resolution

All Binutils users should upgrade to the latest version: