binutils 'archive.c' Local Information Disclosure Vulnerability

Bugtraq ID:	71083
Class:	Input Validation Error
CVE:	CVE-2014-8738
Remote:	No
Local:	Yes
Published:	Nov 02 2014 12:00AM
Updated:	Jul 05 2016 09:40PM
Credit:	Alexander Cherepanov
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Oracle Linux 0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

binutils 'archive.c' Local Information Disclosure Vulnerability

binutils is prone to a local information-disclosure vulnerability.

A local attacker may exploit this issue to gain access to potentially sensitive information. Failed exploits may result in a denial-of-service condition.

binutils 2.22 and 2.24 are vulnerable; other versions may also be affected.

binutils 'archive.c' Local Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.


Mandriva Business Server 1 X86 64

• Mandriva binutils-2.22-4.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/


• Mandriva lib64binutils-devel-2.22-4.1.mbs1.x86_64.rpm
  http://www.mandriva.com/en/downloads/

binutils 'archive.c' Local Information Disclosure Vulnerability

References: