PT-2018-2384 · Gnu+3 · Gnu Binutils+3
Ruikai Liu
·
Publicado
2018-02-02
·
Atualizado
2024-06-15
·
CVE-2018-6543
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.30
Description
The issue is related to an integer overflow in the
load specific debug section() function in objdump.c. This overflow results in malloc() being called with a size of 0. A crafted ELF file can be used by remote attackers to cause a denial of service, leading to an application crash, or possibly having other unspecified impacts.Recommendations
For GNU Binutils version 2.30, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict the use of the
load specific debug section() function in objdump.c to minimize the risk of exploitation. Avoid processing crafted ELF files until the issue is resolved.Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Binutils
Suse
Ubuntu