CVE-2012-3509

Publication date 5 September 2012

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.

Status

Package Ubuntu Release Status
binutils 14.10 utopic
Not affected
14.04 LTS trusty
Not affected
13.10 saucy Ignored end of life
13.04 raring Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise
Fixed 2.22-6ubuntu1.2
11.10 oneiric Ignored end of life
11.04 natty Ignored end of life
10.04 LTS lucid
Fixed 2.20.1-3ubuntu7.2
8.04 LTS hardy Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
binutils

References

Related Ubuntu Security Notices (USN)

    • USN-2496-1
    • GNU binutils vulnerabilities
    • 9 February 2015

Other references