High
mingw-w64 — security advisory
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
- Products
- mingw-w64
- Affected versions
- 11.0.1-2, 11.0.1-3, 11.0.1-3build1, 12.0.0-3, 13.0.0-1+bootstrap2, 13.0.0-2ubuntu1, 3.0.0-3, 3.0~svn5915-1, 3.1.0-1, 4.0.2-4, 4.0.4-1, 4.0.4-2, 5.0.2-2, 5.0.3-1, 6.0.0-3, 6.0.0-4, 7.0.0-2, 8.0.0-1
- Fixed versions
- Not specified
- CVEs
- CVE-2016-4973
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:20 UTC · Revision 1
Source evidence
Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.
osv:UBUNTU-CVE-2016-4973
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
mingw-w64
Fixed versions: Not specified
Complete source record
{
"id": "2361dd6e17708733c82bef9b2cf8a54ee0ffbde6c75af476522eaf28737bcf6b",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2016-4973",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2016-4973",
"summary": "Binaries compiled against targets that use the libssp library in GCC for stack smashing protection (SSP) might allow local users to perform buffer overflow attacks by leveraging lack of the Object Size Checking feature.",
"evidence": "osv:UBUNTU-CVE-2016-4973",
"products": [
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "3.0~svn5915-1",
"evidence": "/affected/0/versions"
},
{
"value": "3.0.0-3",
"evidence": "/affected/0/versions"
},
{
"value": "3.1.0-1",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "4.0.2-4",
"evidence": "/affected/1/versions"
},
{
"value": "4.0.4-1",
"evidence": "/affected/1/versions"
},
{
"value": "4.0.4-2",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "5.0.2-2",
"evidence": "/affected/2/versions"
},
{
"value": "5.0.3-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "6.0.0-3",
"evidence": "/affected/3/versions"
},
{
"value": "6.0.0-4",
"evidence": "/affected/3/versions"
},
{
"value": "7.0.0-2",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "8.0.0-1",
"evidence": "/affected/4/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "11.0.1-2",
"evidence": "/affected/5/versions"
},
{
"value": "11.0.1-3",
"evidence": "/affected/5/versions"
},
{
"value": "11.0.1-3build1",
"evidence": "/affected/5/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "12.0.0-3",
"evidence": "/affected/6/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "13.0.0-2ubuntu1",
"evidence": "/affected/7/versions"
}
]
},
{
"name": {
"value": "mingw-w64",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "12.0.0-3",
"evidence": "/affected/8/versions"
},
{
"value": "13.0.0-1+bootstrap2",
"evidence": "/affected/8/versions"
},
{
"value": "13.0.0-2ubuntu1",
"evidence": "/affected/8/versions"
}
]
}
],
"severity": "high",
"structured": {
"id": "UBUNTU-CVE-2016-4973",
"aliases": [
"UBUNTU-CVE-2016-4973"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "Ubuntu",
"score": "low"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=trusty",
"ecosystem": "Ubuntu:14.04:LTS"
},
"versions": [
"3.0~svn5915-1",
"3.0.0-3",
"3.1.0-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "3.1.0-1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "3.1.0-1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "3.1.0-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=xenial",
"ecosystem": "Ubuntu:16.04:LTS"
},
"versions": [
"4.0.2-4",
"4.0.4-1",
"4.0.4-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "4.0.4-2"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "4.0.4-2"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "4.0.4-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=bionic",
"ecosystem": "Ubuntu:18.04:LTS"
},
"versions": [
"5.0.2-2",
"5.0.3-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "5.0.3-1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "5.0.3-1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "5.0.3-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=focal",
"ecosystem": "Ubuntu:20.04:LTS"
},
"versions": [
"6.0.0-3",
"6.0.0-4",
"7.0.0-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "7.0.0-2"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "7.0.0-2"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "7.0.0-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"8.0.0-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "8.0.0-1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "8.0.0-1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "8.0.0-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"11.0.1-2",
"11.0.1-3",
"11.0.1-3build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "11.0.1-3build1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "11.0.1-3build1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "11.0.1-3build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"12.0.0-3"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "12.0.0-3"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "12.0.0-3"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "12.0.0-3"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"13.0.0-2ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "13.0.0-2ubuntu1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "13.0.0-2ubuntu1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "13.0.0-2ubuntu1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "mingw-w64",
"purl": "pkg:deb/ubuntu/mingw-w64?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"12.0.0-3",
"13.0.0-1+bootstrap2",
"13.0.0-2ubuntu1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2016/UBUNTU-CVE-2016-4973.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "mingw-w64",
"binary_version": "13.0.0-2ubuntu1"
},
{
"binary_name": "mingw-w64-common",
"binary_version": "13.0.0-2ubuntu1"
},
{
"binary_name": "mingw-w64-tools",
"binary_version": "13.0.0-2ubuntu1"
}
]
}
}
],
"modified": "2026-10-17T12:52:44.778789414Z",
"provider": "osv",
"upstream": [
"CVE-2016-4973"
],
"references": [
"https://ubuntu.com/security/CVE-2016-4973",
"https://www.cve.org/CVERecord?id=CVE-2016-4973"
]
},
"related_cves": [
{
"value": "CVE-2016-4973",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 353282,
"published_at": "2017-06-07T20:29:00+00:00"
}