PT-2018-3953 · Gnu+5 · Gnu Binutils+5
Thuan Pham
·
Publicado
2018-04-14
·
Atualizado
2024-06-15
·
CVE-2018-10372
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.30
Description
The issue is related to a heap-based buffer over-read and application crash in the
process cu tu index function in dwarf.c. This can be exploited by remote attackers using a crafted binary file, leading to a denial of service. The vulnerability is associated with reading beyond the valid boundaries of a data buffer.Recommendations
For GNU Binutils version 2.30, consider updating to a newer version that addresses this issue, as the current version is affected by the buffer over-read vulnerability in the
process cu tu index function. As a temporary workaround, consider restricting the use of crafted binary files to minimize the risk of exploitation.Exploit
Correção
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Gnu Binutils
Red Hat
Suse
Ubuntu