CVE-2019-9072

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in setup_group in elf.c.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89396Exploit, Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/202107-24Third Party Advisory
https://security.netapp.com/advisory/ntap-20190314-0003/Patch, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24232Issue Tracking, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24237Exploit, Issue Tracking, Third Party Advisory
https://support.f5.com/csp/article/K12541829Third Party Advisory
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89396Exploit, Issue Tracking, Third Party Advisory
https://security.gentoo.org/glsa/202107-24Third Party Advisory
https://security.netapp.com/advisory/ntap-20190314-0003/Patch, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24232Issue Tracking, Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24237Exploit, Issue Tracking, Third Party Advisory
https://support.f5.com/csp/article/K12541829Third Party Advisory

Timeline

Published: Feb 24, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-90735.5An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted ex CVE-2019-90745.5An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an out-of-bound CVE-2019-90757.8An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based bu CVE-2019-90765.5An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted ex CVE-2019-90777.8An issue was discovered in GNU Binutils 2.32. It is a heap-based buffer overflow in process_mips_specific in readelf.c via a malformed MIPS CVE-2019-90785.4zzcms 2019 has XSS via an arbitrary user/ask.php?do=modify parameter because inc/stopsqlin.php does not block a mixed-case string such as sC CVE-2019-90807.5DomainMOD before 4.14.0 uses MD5 without a salt for password storage.CVE-2019-90828.8ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via public//?s=index/\think\app CVE-2019-90839.8SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.CVE-2019-90844.9In Hoteldruid before 2.3.1, a division by zero was discovered in $num_tabelle in tab_tariffe.php (aka the numtariffa1 parameter) due to the CVE-2019-90856.5Hoteldruid before v2.3.1 allows remote authenticated users to cause a denial of service (invoice-creation outage) via the n_file parameter t CVE-2019-90869.8HotelDruid before v2.3.1 has SQL Injection via the /visualizza_tabelle.php anno parameter.