PT-2018-2390 · Gnu+5 · Objcopy+7
Skysider
·
Publicado
2018-03-02
·
Atualizado
2024-06-15
·
CVE-2018-7642
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Binutils versions 2.30 and earlier
Description
The issue is related to the
swap std reloc in function in aoutx.h within the Binary File Descriptor (BFD) library, also known as libbfd. This function is vulnerable to a denial of service attack, where remote attackers can cause the application to crash due to a NULL pointer dereference in aout 32 swap std reloc out. This can be achieved by using a crafted ELF file, as demonstrated by the objcopy tool.Recommendations
For GNU Binutils versions 2.30 and earlier, consider updating to a version that includes a fix for the
swap std reloc in function issue.
As a temporary workaround, consider restricting the use of the swap std reloc in function until a patch is available.
Avoid using the objcopy tool with untrusted ELF files until the issue is resolved.Correção
DoS
NULL Pointer Dereference
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Bfd Library
Centos
Gnu Binutils
Red Hat
Suse
Ubuntu
Objcopy