Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2019-1010204: GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Sig

36
Routine
MEDIUM 5.5UPGRADEUPGRADEMITIGATE

CVE-2019-1010204 is a medium-severity flaw (CVSS 5.5) affecting binutils, binutils gold, hci management node. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfcpp_file.h:644. The attack vector is: An ELF file with an invalid e_shoff header field must be opened.

Why this priority

  • No elevated risk signals yet

A fixed release or distro patch exists.

Risk facts

CVSS score5.5 (Medium)
Attack vectorLocal
Attack complexityLow
Privileges neededNone
User interactionRequired
EPSS exploit chance1.1% (top 34%)
CISA exploited listNo
WeaknessCWE-125, CWE-681
Published2019-07-23
Last modified2026-06-17
Publisher (CNA): DWF · Vendor: gnu · netapp

Share: LinkedIn · X · Reddit

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

gnu binutils UPGRADE
Affected: >= 2.21 and <= 2.31.1
Fixed in: newer than 2.31.1
Safe to downgrade to: a release before 2.21
1. Check installed version
apt-cache policy binutils || rpm -q binutils || binutils --version
2. UPGRADE to newer than 2.31.1 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade binutils
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade binutils
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 2.21 (Debian / Ubuntu)
apt-cache madison binutils sudo apt install binutils=<VERSION_BEFORE_2.21> sudo apt-mark hold binutils
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list binutils sudo dnf downgrade binutils-<VERSION_BEFORE_2.21> sudo dnf versionlock add binutils
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
gnu binutils gold UPGRADE
Affected: >= 1.11 and <= 1.16
Fixed in: newer than 1.16
Safe to downgrade to: a release before 1.11
1. Check installed version
apt-cache policy binutils-gold || rpm -q binutils-gold || binutils-gold --version
2. UPGRADE to newer than 1.16 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade binutils-gold
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade binutils-gold
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
3. If no update is available yet, DOWNGRADE to a release before 1.11 (Debian / Ubuntu)
apt-cache madison binutils-gold sudo apt install binutils-gold=<VERSION_BEFORE_1.11> sudo apt-mark hold binutils-gold
3. If no update is available yet, DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list binutils-gold sudo dnf downgrade binutils-gold-<VERSION_BEFORE_1.11> sudo dnf versionlock add binutils-gold
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
netapp hci management node MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy hci-management-node || rpm -q hci-management-node || hci-management-node --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
netapp solidfire MITIGATE
Affected: all versions
Fixed in: no fixed release known
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy solidfire || rpm -q solidfire || solidfire --version
No fixed or unaffected release known
Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2019-1010204?

binutils: upgrade to newer than 2.31.1; binutils gold: upgrade to newer than 1.16; hci management node: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2019-1010204 being exploited?

CVE-2019-1010204 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2019-1010204 affect?

CVE-2019-1010204 affects binutils, binutils gold, hci management node. Severity is medium (CVSS 5.5). GNU binutils gold gold v1.11-v1.16 (GNU binutils v2.21-v2.31.1) is affected by: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read. The impact is: Denial of service. The component is: gold/fileread.cc:497, elfcpp/elfc

How urgent is CVE-2019-1010204?

Priority 36/100. No elevated risk signals yet.

Related CVEs

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.