905736 – (CVE-2014-8737) VUL-0: CVE-2014-8737: binutils: Directory traversal vulnerability allowing random file deletion/creation

Bug 905736 (CVE-2014-8737) - VUL-0: CVE-2014-8737: binutils: Directory traversal vulnerability allowing random file deletion/creation

Summary: VUL-0: CVE-2014-8737: binutils: Directory traversal vulnerability allowing ra...

Status:	RESOLVED FIXED
Duplicates (1):	912408 (view as bug list)

Alias:	CVE-2014-8737

Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents (show other bugs)
Version:	unspecified
Hardware:	Other Other

Priority:	P3 - Medium Severity: Normal
Target Milestone:	---
Deadline:	2015-12-30
Assignee:	Michael Matz
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/110755/
Whiteboard:	maint:released:sle11-sp3:60333 CVSSv2...
Keywords:

Depends on:
Blocks:

Clone This Bug

Reported:	2014-11-17 12:44 UTC by Johannes Segitz
Modified:	2016-09-08 20:23 UTC (History)
CC List:	3 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Johannes Segitz 2014-11-17 12:44:20 UTC

Directory traversal in ar:

$ printf '!<arch>\n%-48s%-10d`\n../file\n%-48s%-10s`\n' '//' 8 '/0' 0 > test.a

$ ar xv test.a
x - ../file

Report: https://sourceware.org/bugzilla/show_bug.cgi?id=17552#c4

Patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=dd9b91de2149ee81d47f708e7b0bbf57da10ad42

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-8737
http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8737.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8737

Comment 2 Swamp Workflow Management 2014-11-17 23:00:23 UTC

bugbot adjusting priority

Comment 4 Michael Matz 2015-01-12 16:34:44 UTC

*** Bug 912408 has been marked as a duplicate of this bug. ***

Comment 5 Swamp Workflow Management 2015-01-27 15:05:47 UTC

SUSE-SU-2015:0152-1: An update that fixes 8 vulnerabilities is now available.

Category: security (moderate)
Bug References: 902676,902677,903655,905735,905736
CVE References: CVE-2014-8484,CVE-2014-8485,CVE-2014-8501,CVE-2014-8502,CVE-2014-8503,CVE-2014-8504,CVE-2014-8737,CVE-2014-8738
Sources used:
SUSE Linux Enterprise Software Development Kit 12 (src):    binutils-2.24-7.1, cross-ppc-binutils-2.24-7.1, cross-spu-binutils-2.24-7.1
SUSE Linux Enterprise Server 12 (src):    binutils-2.24-7.1
SUSE Linux Enterprise Desktop 12 (src):    binutils-2.24-7.1

Comment 6 Swamp Workflow Management 2015-01-29 02:07:31 UTC

SUSE-SU-2015:0168-1: An update that fixes 8 vulnerabilities is now available.

Category: security (moderate)
Bug References: 902676,902677,903655,905735,905736
CVE References: CVE-2014-8484,CVE-2014-8485,CVE-2014-8501,CVE-2014-8502,CVE-2014-8503,CVE-2014-8504,CVE-2014-8737,CVE-2014-8738
Sources used:
SUSE Linux Enterprise Software Development Kit 11 SP3 (src):    binutils-2.23.1-0.23.15, cross-ppc-binutils-2.23.1-0.23.2, cross-spu-binutils-2.23.1-0.23.2
SUSE Linux Enterprise Server 11 SP3 for VMware (src):    binutils-2.23.1-0.23.15
SUSE Linux Enterprise Server 11 SP3 (src):    binutils-2.23.1-0.23.15
SUSE Linux Enterprise Desktop 11 SP3 (src):    binutils-2.23.1-0.23.15

Comment 7 Marcus Meissner 2015-01-29 07:50:09 UTC

all interesting ones done.

Comment 8 Swamp Workflow Management 2015-12-16 16:39:32 UTC

An update workflow for this issue was started.
This issue was rated as moderate.
Please submit fixed packages until 2015-12-30.
When done, reassign the bug to security-team@suse.de.
https://swamp.suse.de/webswamp/wf/62377

Comment 9 Tristan Ye 2016-02-05 03:40:38 UTC

Guys, can SLES 11SP1 also be affected by this issue?