CVE-2019-14250: Canonical Ubuntu Linux

Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days.

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. simple_object_elf_match in simple-object-elf.c does not check for a zero shstrndx value, leading to an integer overflow and resultant heap-based buffer overflow.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only
• GNU Binutils: version 2.32 only
• Opensuse Leap: version 15.0 only; version 15.1 only; version 15.2 only

Published 2019-07-24. Last modified 2026-10-08.