CVE catalog

CVE-2019-14250

binutils: CVE-2019-14250

[CVE catalog]

Severity
Medium · CVSS 5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.31% · Oct 25, 2026

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3fixed
Debianbinutilsbookworm2.40-2fixed
CpebinutilsNot reportedNot reportedunknown
Cpeubuntu_linuxNot reportedNot reportedunknown
CpeleapNot reportedNot reportedunknown
Ubuntubinutilspro2.25.1-6ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151022-0ubuntu2vulnerable
Ubuntubinutilspro2.25.51.20151022-0ubuntu3vulnerable
Ubuntubinutilspro2.25.51.20151027-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151028-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151106-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151113-1ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151113-2ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151125-1ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151125-2ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151211-0ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151211-0ubuntu2vulnerable
Ubuntubinutilspro2.25.90.20160101-1ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20160101-1ubuntu2vulnerable
Ubuntubinutilspro2.26-2ubuntu1vulnerable
Ubuntubinutilspro2.26-3ubuntu1vulnerable
Ubuntubinutilspro2.26-4ubuntu1vulnerable
Ubuntubinutilspro2.26-5ubuntu1vulnerable
Ubuntubinutilspro2.26-6ubuntu1vulnerable
Ubuntubinutilspro2.26-7ubuntu2vulnerable
Ubuntubinutilspro2.26-8ubuntu1vulnerable
Ubuntubinutilspro2.26-8ubuntu2vulnerable
Ubuntubinutilspro2.26-8ubuntu2.1vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.1vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.3vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.4vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.5vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.6vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.7vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm1fixed
Ubuntulibiberty16.0420141014-1vulnerable
Ubuntulibiberty16.0420160215-1vulnerable
Ubuntulibiberty16.0420160215-1ubuntu0.2vulnerable
Ubuntulibiberty16.0420160215-1ubuntu0.3fixed
Ubuntubinutils18.042.29.1-4ubuntu1vulnerable
Ubuntubinutils18.042.29.1-6ubuntu1vulnerable
Ubuntubinutils18.042.29.1-7ubuntu1vulnerable
Ubuntubinutils18.042.29.1-8ubuntu1vulnerable
Ubuntubinutils18.042.29.1-10ubuntu1vulnerable
Ubuntubinutils18.042.29.1-12ubuntu1vulnerable
Ubuntubinutils18.042.30-4ubuntu1vulnerable
Ubuntubinutils18.042.30-5ubuntu1vulnerable
Ubuntubinutils18.042.30-7ubuntu1vulnerable
Ubuntubinutils18.042.30-8ubuntu1vulnerable
Ubuntubinutils18.042.30-9ubuntu1vulnerable
Ubuntubinutils18.042.30-10ubuntu1vulnerable
Ubuntubinutils18.042.30-11ubuntu1vulnerable
Ubuntubinutils18.042.30-14ubuntu2vulnerable
Ubuntubinutils18.042.30-15ubuntu1vulnerable
Ubuntubinutils18.042.30-20ubuntu2~18.04vulnerable
Ubuntubinutils18.042.30-21ubuntu1~18.04vulnerable
Ubuntubinutils18.042.30-21ubuntu1~18.04.1vulnerable
Ubuntubinutils18.042.30-21ubuntu1~18.04.2vulnerable
Ubuntubinutils18.042.30-21ubuntu1~18.04.3fixed
Ubuntulibiberty18.0420170913-1vulnerable
Ubuntulibiberty18.0420170913-1ubuntu0.1fixed
Susegcc7linux enterprise module for basesystem 157.4.1+r275405-4.9.2fixed
Susegcc7linux enterprise module for basesystem 15 sp17.4.1+r275405-4.9.2fixed
Susecross-nvptx-gcc7linux enterprise module for development tools 157.4.1+r275405-4.9.2fixed
Susegcc7linux enterprise module for development tools 157.4.1+r275405-4.9.2fixed
Susecross-nvptx-gcc7linux enterprise module for development tools 15 sp17.4.1+r275405-4.9.2fixed
Susegcc7linux enterprise module for development tools 15 sp17.4.1+r275405-4.9.2fixed
Susegcc48linux enterprise software development kit 12 sp54.8.5-31.26.1fixed
Suselibffi48linux enterprise software development kit 12 sp54.8.5-31.26.1fixed
Suselibgcj48linux enterprise software development kit 12 sp54.8.5-31.26.1fixed
Susegcc48linux enterprise server 12 sp54.8.5-31.26.1fixed
Susegcc48linux enterprise server for sap applications 12 sp54.8.5-31.26.1fixed
Suselibgcj48linux enterprise workstation extension 12 sp54.8.5-31.26.1fixed
Susegcc9hpe helion openstack 89.2.1+r275327-1.3.9fixed
Susegcc9openstack cloud 79.2.1+r275327-1.3.9fixed
Susegcc9openstack cloud 89.2.1+r275327-1.3.9fixed
Susegcc9openstack cloud crowbar 89.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise module for toolchain 129.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server for sap applications 12 sp19.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server for sap applications 12 sp29.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server for sap applications 12 sp39.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp1-ltss9.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp2-ltss9.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp2-bcl9.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp3-ltss9.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp3-bcl9.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp49.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server for sap applications 12 sp49.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server 12 sp59.2.1+r275327-1.3.9fixed
Susegcc9linux enterprise server for sap applications 12 sp59.2.1+r275327-1.3.9fixed
Susegcc9enterprise storage 59.2.1+r275327-1.3.9fixed
Opensusegcc7tumbleweed7.5.0+r278197-10.1fixed
Opensusegcc7leap 15.07.4.1+r275405-lp150.12.1fixed
Susecross-nvptx-gcc7linux enterprise module for toolchain 127.5.0+r278197-13.1fixed
Susegcc7linux enterprise module for toolchain 127.5.0+r278197-13.1fixed
Susegcc7linux enterprise server 12 sp57.5.0+r278197-13.1fixed
Susegcc7linux enterprise server for sap applications 12 sp57.5.0+r278197-13.1fixed
Opensusegcc7leap 15.17.4.1+r275405-lp151.2.6.1fixed
Opensusecross-nvptx-gcc9leap 15.19.3.1+git1296-lp151.2.1fixed
Opensusegcc9leap 15.19.3.1+git1296-lp151.2.2fixed
Susegcc9linux enterprise module for basesystem 159.2.1+r275327-1.3.7fixed
Susegcc9linux enterprise module for basesystem 15 sp19.2.1+r275327-1.3.7fixed
Susegcc9linux enterprise module for development tools 159.2.1+r275327-1.3.7fixed
Susegcc9linux enterprise module for development tools 15 sp19.2.1+r275327-1.3.7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.33-1unimportantNot reportedNot reported
Debianbinutilssourceforky2.33-1unimportantNot reportedNot reported
Debianbinutilssourcetrixie2.33-1unimportantNot reportedNot reported
Debianbinutilssourcebookworm2.33-1unimportantNot reportedNot reported
Ubuntubinutilsdebpro2.26.1-1ubuntu1~16.04.8+esm1Not reportedUBUNTU-CVE-2019-14250Not reported
Ubuntulibibertydeb16.0420160215-1ubuntu0.3Not reportedUBUNTU-CVE-2019-14250Not reported
Ubuntubinutilsdeb18.042.30-21ubuntu1~18.04.3Not reportedUBUNTU-CVE-2019-14250Not reported
Ubuntulibibertydeb18.0420170913-1ubuntu0.1Not reportedUBUNTU-CVE-2019-14250Not reported
Susegcc7rpmlinux enterprise module for basesystem 157.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susegcc7rpmlinux enterprise module for basesystem 15 sp17.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susecross-nvptx-gcc7rpmlinux enterprise module for development tools 157.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susegcc7rpmlinux enterprise module for development tools 157.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susecross-nvptx-gcc7rpmlinux enterprise module for development tools 15 sp17.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susegcc7rpmlinux enterprise module for development tools 15 sp17.4.1+r275405-4.9.2Not reportedSUSE-SU-2019:2702-1Not reported
Susegcc48rpmlinux enterprise software development kit 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Suselibffi48rpmlinux enterprise software development kit 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Suselibgcj48rpmlinux enterprise software development kit 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Susegcc48rpmlinux enterprise server 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Susegcc48rpmlinux enterprise server for sap applications 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Suselibgcj48rpmlinux enterprise workstation extension 12 sp54.8.5-31.26.1Not reportedSUSE-SU-2022:2015-1Not reported
Susegcc9rpmhpe helion openstack 89.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmopenstack cloud 79.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmopenstack cloud 89.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmopenstack cloud crowbar 89.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise module for toolchain 129.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server for sap applications 12 sp19.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server for sap applications 12 sp29.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server for sap applications 12 sp39.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp1-ltss9.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp2-ltss9.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp2-bcl9.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp3-ltss9.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp3-bcl9.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp49.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server for sap applications 12 sp49.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server 12 sp59.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmlinux enterprise server for sap applications 12 sp59.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Susegcc9rpmenterprise storage 59.2.1+r275327-1.3.9Not reportedSUSE-SU-2020:0394-1Not reported
Opensusegcc7rpmtumbleweed7.5.0+r278197-10.1Not reportedOPENSUSE-SU-2024:10703-1Not reported
Opensusegcc7rpmleap 15.07.4.1+r275405-lp150.12.1Not reportedOPENSUSE-SU-2019:2365-1Not reported
Susecross-nvptx-gcc7rpmlinux enterprise module for toolchain 127.5.0+r278197-13.1Not reportedSUSE-SU-2023:3662-1Not reported
Susegcc7rpmlinux enterprise module for toolchain 127.5.0+r278197-13.1Not reportedSUSE-SU-2023:3662-1Not reported
Susegcc7rpmlinux enterprise server 12 sp57.5.0+r278197-13.1Not reportedSUSE-SU-2023:3662-1Not reported
Susegcc7rpmlinux enterprise server for sap applications 12 sp57.5.0+r278197-13.1Not reportedSUSE-SU-2023:3662-1Not reported
Opensusegcc7rpmleap 15.17.4.1+r275405-lp151.2.6.1Not reportedOPENSUSE-SU-2019:2364-1Not reported
Opensusecross-nvptx-gcc9rpmleap 15.19.3.1+git1296-lp151.2.1Not reportedOPENSUSE-SU-2020:0716-1Not reported
Opensusegcc9rpmleap 15.19.3.1+git1296-lp151.2.2Not reportedOPENSUSE-SU-2020:0716-1Not reported
Susegcc9rpmlinux enterprise module for basesystem 159.2.1+r275327-1.3.7Not reportedSUSE-SU-2019:3061-1Not reported
Susegcc9rpmlinux enterprise module for basesystem 15 sp19.2.1+r275327-1.3.7Not reportedSUSE-SU-2019:3061-1Not reported
Susegcc9rpmlinux enterprise module for development tools 159.2.1+r275327-1.3.7Not reportedSUSE-SU-2019:3061-1Not reported
Susegcc9rpmlinux enterprise module for development tools 15 sp19.2.1+r275327-1.3.7Not reportedSUSE-SU-2019:3061-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [cpp7]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-32bit]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-ada]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-c++]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-devel]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-fortran]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-go]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-go-32bit]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-info]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · noarch · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-locale]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-obj-c++]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [gcc7-objc]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [libada7]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [libada7-32bit]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

  • [libasan4]Unknown

    Source package: [gcc7]

    Details (1)
    • 7.5.0+r278197-24.3 · x86_64 · tumbleweed

      Unknown · Fixed: 7.5.0+r278197-10.1

      Version impact unknown

      dsa · gcc7 · opensuse · tumbleweed

Next results

Observed:

References