CVE-2019-9075: Canonical Ubuntu Linux

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is a heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap in archive64.c.

Affected products

• Canonical Ubuntu Linux: version 18.04 only
• F5 BIG-IP Access Policy Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Advanced Firewall Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Analytics: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Application Acceleration Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Application Security Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Domain Name System: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Edge Gateway: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Fraud Protection Service: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Global Traffic Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Link Controller: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Local Traffic Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Policy Enforcement Manager: version 14.1.0 only; version 15.0.0 only
• F5 BIG-IP Policy Webaccelerator: version 14.1.0 only
• F5 BIG-IP Webaccelerator: version 15.0.0 only
• GNU Binutils: version 2.32 only
• Netapp Hci Management Node: affected versions not specified
• Netapp Solidfire: affected versions not specified

Published 2019-02-24. Last modified 2026-06-17.