Every CVE Search/ Get API key

CVE-2017-9754

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka...

7.8 HighFix available

CVE-2017-9754 is a high vulnerability (CVSS 7.8) in Gnu Binutils, published June 19, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in binutils 2.26.1-1ubuntu1~16.04.10.

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

2.73%Up 1.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
CVE-2017-9754
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
CVE-2017-9754
Updated
2026-11-02
EUVDEUVD-2017-18684 No score

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
EUVD-2017-18684
Updated
2026-11-03
GitHub AdvisoriesGHSA-pmvw-j59m-hxq4 7.8

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka...

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
GHSA-pmvw-j59m-hxq4
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 7.8

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
CVE-2017-9754
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2017-9754 7.8

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
DEBIAN-CVE-2017-9754
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2017-9754 7.8

The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Record
UBUNTU-CVE-2017-9754
CVSS 3.0
7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVCLSA-2021-1635459139 No score

Fix CVE(s): CVE-2018-6323, CVE-2017-8421, CVE-2017-15024, CVE-2017-15025, CVE-2017-15022, CVE-2017-15020, CVE-2017-15021, CVE-2017-15225, CVE-2018-18483, CVE-2017-15996, CVE-2018-18484, CVE-2017-12799, CVE-2017-16831, CVE-2017-16832, CVE-2018-1000876, CVE-2018-7208, CVE-2019-14250, CVE-2017-12967, CVE-2019-9075, CVE-2017-17080, CVE-2019-9074, CVE-2018-17794, CVE-2017-17125, CVE-2017-17124, CVE-2017-17121, CVE-2017-6969, CVE-2017-17123, CVE-2018-17358, CVE-2017-6965, CVE-2017-6966, CVE-2018-12641, CVE-2018-8945, CVE-2017-7299, CVE-2018-12699, CVE-2018-10372, CVE-2018-10373, CVE-2019-17451, CVE-2019-17450, CVE-2018-18701, CVE-2018-18700, CVE-2017-7210, CVE-2018-20623, CVE-2017-15938, CVE-2017-15939, CVE-2017-9039, CVE-2017-9038, CVE-2017-14940, CVE-2018-17985, CVE-2018-12700, CVE-2017-9742, CVE-2017-9745, CVE-2017-9744, CVE-2017-9747, CVE-2017-7209, CVE-2017-9749, CVE-2017-9748, CVE-2018-9138, CVE-2017-16828, CVE-2017-16827, CVE-2017-16826, CVE-2017-7614, CVE-2018-6759, CVE-2016-4491, CVE-2017-9044, CVE-2017-9746, CVE-2017-9042, CVE-2017-9040, CVE-2017-9041, CVE-2017-9752, CVE-2017-9753, CVE-2017-9750, CVE-2017-9751, CVE-2017-9756, CVE-2016-4493, CVE-2017-9754, CVE-2017-9755, CVE-2016-4492, CVE-2018-19932, CVE-2017-12458, CVE-2017-12459, CVE-2018-18606, CVE-2018-18607, CVE-2018-18605, CVE-2017-12452, CVE-2017-12453, CVE-2017-12450, CVE-2017-12451, CVE-2017-12456, CVE-2016-4490, CVE-2017-12454, CVE-2017-12455, CVE-2019-14444, CVE-2016-2226, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2018-18309, CVE-2017-7223, CVE-2017-12449, CVE-2017-12448, CVE-2016-4488, CVE-2016-4489, CVE-2018-17359, CVE-2016-4487, CVE-2018-20671, CVE-2018-20002, CVE-2017-14128, CVE-2017-14129, CVE-2018-7568, CVE-2018-7569, CVE-2017-7302, CVE-2017-7301, CVE-2017-7300, CVE-2018-12934, CVE-2017-8394, CVE-2018-7643, CVE-2018-7642, CVE-2018-17360, CVE-2019-12972, CVE-2018-13033, CVE-2018-19931, CVE-2018-10534, CVE-2018-10535, CVE-2019-9077, CVE-2019-9071, CVE-2019-9070, CVE-2019-9073, CVE-2017-14333, CVE-2018-12698, CVE-2017-14130, CVE-2018-12697, CVE-2018-6543, CVE-2017-9954, CVE-2017-12457, CVE-2017-14939, CVE-2017-14938, CVE-2017-14932, CVE-2017-14930, CVE-2017-8398, CVE-2017-8393, CVE-2017-8395, CVE-2017-14529, CVE-2017-8397, CVE-2017-8396, CVE-2017-13710, CVE-2016-6131

  • SECURITY UPDATE:
    • CVE-*.patch: backported many upstream patches to fix security issues.
    • CVE-2016-2226, CVE-2016-4487, CVE-2016-4488, CVE-2016-4489, CVE-2016-4490, CVE-2016-4492, CVE-2016-4493, CVE-2016-6131, CVE-2016-4491, CVE-2017-6965, CVE-2017-6966, CVE-2017-6969, CVE-2017-7209, CVE-2017-7210, CVE-2017-7223, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2017-7299, CVE-2017-7300, CVE-2017-7301, CVE-2017-7302, CVE-2017-7614, CVE-2017-8393, CVE-2017-8394, CVE-2017-8395, CVE-2017-8397, CVE-2017-8396, CVE-2017-8398, CVE-2017-8421, CVE-2017-9038, CVE-2017-9039, CVE-2017-9040, CVE-2017-9042, CVE-2017-9041, CVE-2017-9044, CVE-2017-9742, CVE-2017-9744, CVE-2017-9752, CVE-2017-9745, CVE-2017-9746, CVE-2017-9747, CVE-2017-9748, CVE-2017-9749, CVE-2017-9750, CVE-2017-9751, CVE-2017-9753, CVE-2017-9754, CVE-2017-9755, CVE-2017-9756, CVE-2017-9954, CVE-2017-12448, CVE-2017-12449, CVE-2017-12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459, CVE-2017-12450, CVE-2017-12452, CVE-2017-12453, CVE-2017-12454, CVE-2017-12456, CVE-2017-14333, CVE-2017-12451, CVE-2017-12799, CVE-2017-12967, CVE-2017-13710, CVE-2017-14128, CVE-2017-14129, CVE-2017-14130, CVE-2017-14529, CVE-2017-14930, CVE-2017-14932, CVE-2017-14938, CVE-2017-14939, CVE-2017-14940, CVE-2017-15020, CVE-2017-15021, CVE-2017-15022, CVE-2017-15024, CVE-2017-15025, CVE-2017-15225, CVE-2017-15938, CVE-2017-15939, CVE-2017-15996, CVE-2017-16826, CVE-2017-16827, CVE-2017-16828, CVE-2017-16831, CVE-2017-16832, CVE-2017-17080, CVE-2017-17121, CVE-2017-17123, CVE-2017-17124, CVE-2018-6323, CVE-2018-6543, CVE-2018-6759, CVE-2018-7208, CVE-2018-7568, CVE-2018-7569, CVE-2018-7642, CVE-2018-7643, CVE-2018-8945, CVE-2018-13033, CVE-2018-9138, CVE-2018-12641, CVE-2018-12697, CVE-2018-12698, CVE-2018-12699, CVE-2018-12700, CVE-2018-17794, CVE-2018-17985, CVE-2018-18484, CVE-2018-18700, CVE-2018-18701, CVE-2018-10372, CVE-2018-10373, CVE-2018-10534, CVE-2018-10535, CVE-2018-12934, CVE-2018-18483, CVE-2018-17358, CVE-2018-17359, CVE-2018-17360, CVE-2018-18309, CVE-2018-18605, CVE-2018-18606, CVE-2018-18607, CVE-2018-19931, CVE-2018-19932, CVE-2018-20002, CVE-2018-20623, CVE-2018-20671, CVE-2018-1000876, CVE-2017-17125, CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077, CVE-2019-9070, CVE-2019-9071, CVE-2019-12972, CVE-2019-14250, CVE-2019-14444, CVE-2019-17450, CVE-2019-17451
Record
CLSA-2021-1635459139
Updated
2026-11-02
OSVCLSA-2021-1637770725 No score

Fixed 56 CVEs in binutils

  • CVE-2017-7223: Fix global buffer overflow (of size 1)
  • CVE-2017-7224: Fix invalid write (of size 1) while disassembling
  • CVE-2017-7225: Fix NULL pointer dereference and an invalid write
  • CVE-2017-7226: Fix heap-based buffer over-read of size 4049
  • CVE-2017-7227: Fix heap-based buffer overflow
  • CVE-2017-7299: Fix invalid read (of size 8) in ELF reloc section
  • CVE-2017-7300: Fix heap-based buffer over-read (off-by-one)
  • CVE-2017-7301: Fix off-by-one vulnerability
  • CVE-2017-7302: Fix invalid read (of size 4)
  • CVE-2017-7614: Fix undefined behavior issue
  • CVE-2017-8393: Fix global buffer over-read error
  • CVE-2017-8394: Fix invalid read of size 4 due to NULL pointer dereferencing
  • CVE-2017-8398: Fix invalid read of size 1 during dumping of debug information
  • CVE-2017-8421: Fix memory leak vulnerability
  • CVE-2017-9742: Fix buffer overflow
  • CVE-2017-9744: Fix buffer overflow
  • CVE-2017-9747: Fix buffer overflow
  • CVE-2017-9748: Fix buffer overflow
  • CVE-2017-9749: Fix buffer overflow
  • CVE-2017-9753: Fix buffer overflow
  • CVE-2017-9754: Fix buffer overflow
  • CVE-2017-12448: Fix use after free
  • CVE-2017-12449: Fix out of bounds heap read
  • CVE-2017-12455: Fix out of bounds heap read
  • CVE-2017-12457: Fix NULL dereference
  • CVE-2017-12458: Fix out of bounds heap read
  • CVE-2017-12459: Fix out of bounds heap write
  • CVE-2017-12450: Fix out of bounds heap write
  • CVE-2017-12452: Fix out of bounds heap read
  • CVE-2017-12453: Fix out of bounds heap read
  • CVE-2017-12454: Fix arbitrary memory read
  • CVE-2017-12456: Fix out of bounds heap read
  • CVE-2017-14333: Fix integer overflow, and hang because of a time-consuming loop
  • CVE-2017-12451: Fix out of bounds stack read
  • CVE-2017-12799: Fix buffer overflow
  • CVE-2017-13710: Fix NULL pointer dereference
  • CVE-2017-14130: Fix _bfd_elf_attr_strdup heap-based buffer over-read
  • CVE-2017-14932: Fix infinite loop
  • CVE-2017-14938: Fix excessive memory allocation
  • CVE-2017-14940: Fix NULL pointer dereference
  • CVE-2017-15020: Fix parse_die heap-based buffer over-read
  • CVE-2017-15022: Fix bfd_hash_hash NULL pointer dereference
  • CVE-2017-15225: Fix divide-by-zero error
  • CVE-2017-15938: Fix find_abstract_instance_name invalid memory read, segmentation fault
  • CVE-2017-15939: Fix NULL pointer dereference
  • CVE-2017-15996: Fix buffer overflow on fuzzed archive header
  • CVE-2017-16826: Fix invalid memory access
  • CVE-2017-16827: Fix slurp_symtab invalid free
  • CVE-2017-16828: Fix integer overflow and heap-based buffer over-read
  • CVE-2017-16831: Fix integer overflow or excessive memory allocation
  • CVE-2017-17080: Fix bfd_getl32 heap-based buffer over-read
  • CVE-2017-8396: Fix invalid read of size 1
  • CVE-2017-17121: Fix memory access violation
  • CVE-2017-17123: Fix NULL pointer dereference
  • CVE-2017-17124: Fix excessive memory consumption or heap-based buffer overflow
  • CVE-2017-17125: Fix buffer over-read
Record
CLSA-2021-1637770725
Updated
2026-11-02
OSVCLSA-2021-1638803819 No score

Fix of 56 CVEs

  • CVE-2017-7223: Fix global buffer overflow (of size 1)
  • CVE-2017-7224: Fix invalid write (of size 1) while disassembling
  • CVE-2017-7225: Fix NULL pointer dereference and an invalid write
  • CVE-2017-7226: Fix heap-based buffer over-read of size 4049
  • CVE-2017-7227: Fix heap-based buffer overflow
  • CVE-2017-7299: Fix invalid read (of size 8) in ELF reloc section
  • CVE-2017-7300: Fix heap-based buffer over-read (off-by-one)
  • CVE-2017-7301: Fix off-by-one vulnerability
  • CVE-2017-7302: Fix invalid read (of size 4)
  • CVE-2017-7614: Fix undefined behavior issue
  • CVE-2017-8393: Fix global buffer over-read error
  • CVE-2017-8394: Fix invalid read of size 4 due to NULL pointer dereferencing
  • CVE-2017-8398: Fix invalid read of size 1 during dumping of debug information
  • CVE-2017-8421: Fix memory leak vulnerability
  • CVE-2017-9742: Fix buffer overflow
  • CVE-2017-9744: Fix buffer overflow
  • CVE-2017-9747: Fix buffer overflow
  • CVE-2017-9748: Fix buffer overflow
  • CVE-2017-9749: Fix buffer overflow
  • CVE-2017-9753: Fix buffer overflow
  • CVE-2017-9754: Fix buffer overflow
  • CVE-2017-12448: Fix use after free
  • CVE-2017-12449: Fix out of bounds heap read
  • CVE-2017-12455: Fix out of bounds heap read
  • CVE-2017-12457: Fix NULL dereference
  • CVE-2017-12458: Fix out of bounds heap read
  • CVE-2017-12459: Fix out of bounds heap write
  • CVE-2017-12450: Fix out of bounds heap write
  • CVE-2017-12452: Fix out of bounds heap read
  • CVE-2017-12453: Fix out of bounds heap read
  • CVE-2017-12454: Fix arbitrary memory read
  • CVE-2017-12456: Fix out of bounds heap read
  • CVE-2017-14333: Fix integer overflow, and hang because of a time-consuming loop
  • CVE-2017-12451: Fix out of bounds stack read
  • CVE-2017-12799: Fix buffer overflow
  • CVE-2017-13710: Fix NULL pointer dereference
  • CVE-2017-14130: Fix _bfd_elf_attr_strdup heap-based buffer over-read
  • CVE-2017-14932: Fix infinite loop
  • CVE-2017-14938: Fix excessive memory allocation
  • CVE-2017-14940: Fix NULL pointer dereference
  • CVE-2017-15020: Fix parse_die heap-based buffer over-read
  • CVE-2017-15022: Fix bfd_hash_hash NULL pointer dereference
  • CVE-2017-15225: Fix divide-by-zero error
  • CVE-2017-15938: Fix find_abstract_instance_name invalid memory read, segmentation fault
  • CVE-2017-15939: Fix NULL pointer dereference
  • CVE-2017-15996: Fix buffer overflow on fuzzed archive header
  • CVE-2017-16826: Fix invalid memory access
  • CVE-2017-16827: slurp_symtab invalid free
  • CVE-2017-16828: Fix integer overflow and heap-based buffer over-read
  • CVE-2017-16831: Fix integer overflow or excessive memory allocation
  • CVE-2017-17080: Fix bfd_getl32 heap-based buffer over-read
  • CVE-2017-8396: Fix invalid read of size 1
  • CVE-2017-17121: Fix memory access violation
  • CVE-2017-17123: Fix NULL pointer dereference
  • CVE-2017-17124: Fix excessive memory consumption or heap-based buffer overflow
  • CVE-2017-17125: Fix buffer over-read
Record
CLSA-2021-1638803819
Updated
2026-11-02
OSVUSN-4336-2 No score

binutils vulnerabilities

USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4336-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
binutils
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-aarch64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-alpha-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabi
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabihf
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-dev
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-doc
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-m68k-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
Show 23 moreShow less
Affected packages
PackageAffectedFixed
binutils-mips-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64-linux-gnuabi64
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64el-linux-gnuabi64
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mipsel-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch-dev
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnuspe
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64le-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-s390x-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sh4-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-source
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sparc64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils
TuxCare:OracleLinux:6
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els2
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els2
binutils-devel
TuxCare:OracleLinux:6
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els2
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els2
binutils
TuxCare:CentOS:6
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els2
1:2.20.51.0.2-5.48.1.el6.tuxcare.els2
binutils-devel
TuxCare:CentOS:6
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els2
1:2.20.51.0.2-5.48.1.el6.tuxcare.els2
binutils
Debian:12
 before 2.29-1
2.29-1
binutils
Debian:13
 before 2.29-1
2.29-1
binutils
Debian:14
 before 2.29-1
2.29-1
binutils
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1
Show 20 moreShow less
2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8
 None known
binutils
Ubuntu:Pro:16.04:LTS
 before 2.26.1-1ubuntu1~16.04.8+esm1, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 26 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 151 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open