CVE-2018-7208 In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/binutils(Debian:12) | < 2.30-6 | 2.30-6 |
| debian/binutils(Debian:13) | < 2.30-6 | 2.30-6 |
| debian/binutils(Debian:14) | < 2.30-6 | 2.30-6 |
| GNU binutils | = 2.30 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
| alpine/binutils(Alpine:v3.7) | < 2.30-r2 | 2.30-r2 |
| alpine/binutils(Alpine:v3.8) | < 2.30-r6 | 2.30-r6 |
References
- Debian Security Tracker CVE-2018-7208 vendor-advisory
- openSUSE-SU-2019:2415 vendor-advisory
- openSUSE-SU-2019:2432 vendor-advisory
- 103077 third-party-advisory vdb-entry
- RHBA-2019:0327 third-party-advisory vendor-advisory
- RHSA-2018:3032 third-party-advisory vendor-advisory
- GLSA-201811-17 third-party-advisory vendor-advisory
- sourceware.org issue-tracking third-party-advisory
- security.alpinelinux.org vendor-advisory