Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CentOS binutils may crash or use excessive memory
published 4 years ago
Summary
The CentOS binutils and binutils‑devel packages contain several flaws that could cause the program to stop working, use up all memory, or allow corrupted data to be written. These issues could lead to system instability or make the system vulnerable to further attacks. Updating to the latest version of these packages will fix the problems.
What to do
- Update centos binutils to version 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4.
- Update centos binutils-devel to version 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:CentOS:6 | centos | binutils |
< 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4 Fix: upgrade to 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
|
| TuxCare:CentOS:6 | centos | binutils-devel |
< 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4 Fix: upgrade to 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
|
Original advisory text
Fix of 14 CVEs
- CVE-2018-9138: Fix stack exhaustion
- CVE-2018-12641: Fix stack exhaustion
- CVE-2018-12697: Fix NULL pointer dereference
- CVE-2018-12698: Fix memory consumption
- CVE-2018-12699: Fix heap-based buffer overflow
- CVE-2018-12700: Fix infinite recursion
- CVE-2018-17794: Fix NULL pointer dereference
- CVE-2018-17985: Fix recursive calls
- CVE-2018-18484: Fix stack exhaustion
- CVE-2018-18700: Fix stack consumption vulnerability
- CVE-2018-18701: Fix infinite recursion
- CVE-2018-18483: Fix malloc call with the result of an integer-overflowing
- CVE-2018-12934: Fix excessive memory consumption
- CVE-2021-45078: Fix heap-based buffer overflow
- CVE-2018-12641: Fix stack exhaustion
- CVE-2018-12697: Fix NULL pointer dereference
- CVE-2018-12698: Fix memory consumption
- CVE-2018-12699: Fix heap-based buffer overflow
- CVE-2018-12700: Fix infinite recursion
- CVE-2018-17794: Fix NULL pointer dereference
- CVE-2018-17985: Fix recursive calls
- CVE-2018-18484: Fix stack exhaustion
- CVE-2018-18700: Fix stack consumption vulnerability
- CVE-2018-18701: Fix infinite recursion
- CVE-2018-18483: Fix malloc call with the result of an integer-overflowing
- CVE-2018-12934: Fix excessive memory consumption
- CVE-2021-45078: Fix heap-based buffer overflow
References
- https://errata.cloudlinux.com/els6/CLSA-2022-1641904053.html Vendor Advisory
Timeline
Published11 Jan 2022
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLSA-2022-1641904053 · OSV
Track software like this
Free during beta