Knowledge Library
Knowledge Library Home
Knowledge Library Home Knowledge Library Products Operating Systems Wind River Linux Wind River Linux 8 Toolchain & Build System LIN8-10004 : Security Advisory - binutils - CVE-2018-18309

LIN8-10004 : Security Advisory - binutils - CVE-2018-18309

Table of contents
Defect #: LIN8-10004
Found In Version8.0.0.28
Fix Version8.0.0.28
Severity:Standard
Status:Fixed
Created Date:10/31/2018
Component/s :Userspace
Sub Component:binutils

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.

https://nvd.nist.gov/vuln/detail/CVE-2018-18309

Downloads


KLID_DEFECT (use as Content ID for linking):  KLID_DEFECT_58118
 
Last modified