PT-2018-3924 · Gnu+5 · Gnu Binutils+5

Cornelius Aschermann + 1 · Publicado 2018-04-11 · Atualizado 2021-07-21 · CVE-2018-12697

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30

Description The issue is related to a NULL pointer dereference error in the work stuff copy to from function of the cplus-dem.c component. This error can be exploited by a remote attacker to cause a denial of service. The vulnerability can occur during the execution of objdump.

Recommendations For GNU Binutils version 2.30, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the NULL pointer dereference error in the work stuff copy to from function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

ALT-PU-2019-1204

ALT-PU-2019-1367

BDU:2023-03807

CESA-2019_2075

CVE-2018-12697

RHSA-2019:2075

RHSA-2019_2075

USN-4326-1

USN-4336-1

USN-4336-2

Produtos afetados

Alt Linux

Astra Linux

Centos

Gnu Binutils

Red Hat

Ubuntu

Referências · 496

• 🔥 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 · Exploit
• 🔥 https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 · Exploit
• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=23057 · Exploit
• https://ubuntu.com/security/CVE-2016-4492 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-4487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-17360 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00670 · Nota de Segurança
• https://sourceware.org/bugzilla/show_bug.cgi?id=24227 · Nota
• https://ubuntu.com/security/CVE-2017-14130 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-9748 · Aviso do Fabricante
• https://sourceware.org/bugzilla/show_bug.cgi?id=23806 · Nota
• https://ubuntu.com/security/CVE-2018-17985 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-7209 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9751 · Nota de Segurança