• info
• discussion
• exploit
• solution
• references

GNU BinUtils Buffer Overflow Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.


GNU Binutils 2.14.90.0.7

• Mandriva binutils-2.14.90.0.7-2.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva binutils-2.14.90.0.7-2.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva lib64binutils2-2.14.90.0.7-2.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva lib64binutils2-devel-2.14.90.0.7-2.3.C30mdk.x86_64.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva libbinutils2-2.14.90.0.7-2.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads


• Mandriva libbinutils2-devel-2.14.90.0.7-2.3.C30mdk.i586.rpm
  Corporate 3.0:
  http://wwwnew.mandriva.com/en/downloads

GNU Binutils 2.15

• Ubuntu binutils-dev_2.15-5ubuntu2.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 15-5ubuntu2.3_amd64.deb


• Ubuntu binutils-dev_2.15-5ubuntu2.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 15-5ubuntu2.3_i386.deb


• Ubuntu binutils-dev_2.15-5ubuntu2.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 15-5ubuntu2.3_powerpc.deb


• Ubuntu binutils-doc_2.15-5ubuntu2.3_all.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-doc_2. 15-5ubuntu2.3_all.deb


• Ubuntu binutils-multiarch_2.15-5ubuntu2.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.15-5ubuntu2.3_amd64.deb


• Ubuntu binutils-multiarch_2.15-5ubuntu2.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.15-5ubuntu2.3_i386.deb


• Ubuntu binutils-multiarch_2.15-5ubuntu2.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.15-5ubuntu2.3_powerpc.deb


• Ubuntu binutils_2.15-5ubuntu2.3_amd64.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.15-5 ubuntu2.3_amd64.deb


• Ubuntu binutils_2.15-5ubuntu2.3_i386.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.15-5 ubuntu2.3_i386.deb


• Ubuntu binutils_2.15-5ubuntu2.3_powerpc.deb
  Ubuntu 5.04:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.15-5 ubuntu2.3_powerpc.deb

GNU Binutils 2.16.1

• Ubuntu binutils-dev_2.16.1-2ubuntu6.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1-2ubuntu6.1_amd64.deb


• Ubuntu binutils-dev_2.16.1-2ubuntu6.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1-2ubuntu6.1_i386.deb


• Ubuntu binutils-dev_2.16.1-2ubuntu6.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1-2ubuntu6.1_powerpc.deb


• Ubuntu binutils-dev_2.16.1cvs20060117-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1cvs20060117-1ubuntu2.1_amd64.deb


• Ubuntu binutils-dev_2.16.1cvs20060117-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1cvs20060117-1ubuntu2.1_i386.deb


• Ubuntu binutils-dev_2.16.1cvs20060117-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-dev_2. 16.1cvs20060117-1ubuntu2.1_powerpc.deb


• Ubuntu binutils-doc_2.16.1-2ubuntu6.1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-doc_2. 16.1-2ubuntu6.1_all.deb


• Ubuntu binutils-doc_2.16.1cvs20060117-1ubuntu2.1_all.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-doc_2. 16.1cvs20060117-1ubuntu2.1_all.deb


• Ubuntu binutils-multiarch_2.16.1-2ubuntu6.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1-2ubuntu6.1_amd64.deb


• Ubuntu binutils-multiarch_2.16.1-2ubuntu6.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1-2ubuntu6.1_i386.deb


• Ubuntu binutils-multiarch_2.16.1-2ubuntu6.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1-2ubuntu6.1_powerpc.deb


• Ubuntu binutils-multiarch_2.16.1cvs20060117-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1cvs20060117-1ubuntu2.1_amd64.deb


• Ubuntu binutils-multiarch_2.16.1cvs20060117-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1cvs20060117-1ubuntu2.1_i386.deb


• Ubuntu binutils-multiarch_2.16.1cvs20060117-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/universe/b/binutils/binutils-mu ltiarch_2.16.1cvs20060117-1ubuntu2.1_powerpc.deb


• Ubuntu binutils-static-udeb_2.16.1-2ubuntu6.1_amd64.udeb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1-2ubuntu6.1_amd64.udeb


• Ubuntu binutils-static-udeb_2.16.1-2ubuntu6.1_i386.udeb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1-2ubuntu6.1_i386.udeb


• Ubuntu binutils-static-udeb_2.16.1-2ubuntu6.1_powerpc.udeb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1-2ubuntu6.1_powerpc.udeb


• Ubuntu binutils-static-udeb_2.16.1cvs20060117-1ubuntu2.1_amd64.udeb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1cvs20060117-1ubuntu2.1_amd64.udeb


• Ubuntu binutils-static-udeb_2.16.1cvs20060117-1ubuntu2.1_i386.udeb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1cvs20060117-1ubuntu2.1_i386.udeb


• Ubuntu binutils-static-udeb_2.16.1cvs20060117-1ubuntu2.1_powerpc.udeb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static -udeb_2.16.1cvs20060117-1ubuntu2.1_powerpc.udeb


• Ubuntu binutils-static_2.16.1-2ubuntu6.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1-2ubuntu6.1_amd64.deb


• Ubuntu binutils-static_2.16.1-2ubuntu6.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1-2ubuntu6.1_i386.deb


• Ubuntu binutils-static_2.16.1-2ubuntu6.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1-2ubuntu6.1_powerpc.deb


• Ubuntu binutils-static_2.16.1cvs20060117-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1cvs20060117-1ubuntu2.1_amd64.deb


• Ubuntu binutils-static_2.16.1cvs20060117-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1cvs20060117-1ubuntu2.1_i386.deb


• Ubuntu binutils-static_2.16.1cvs20060117-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils-static _2.16.1cvs20060117-1ubuntu2.1_powerpc.deb


• Ubuntu binutils_2.16.1-2ubuntu6.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 -2ubuntu6.1_amd64.deb


• Ubuntu binutils_2.16.1-2ubuntu6.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 -2ubuntu6.1_i386.deb


• Ubuntu binutils_2.16.1-2ubuntu6.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 -2ubuntu6.1_powerpc.deb


• Ubuntu binutils_2.16.1cvs20060117-1ubuntu2.1_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 cvs20060117-1ubuntu2.1_amd64.deb


• Ubuntu binutils_2.16.1cvs20060117-1ubuntu2.1_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 cvs20060117-1ubuntu2.1_i386.deb


• Ubuntu binutils_2.16.1cvs20060117-1ubuntu2.1_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/b/binutils/binutils_2.16.1 cvs20060117-1ubuntu2.1_powerpc.deb