PT-2019-6397 · Gnu+5 · Gnu Binutils+5
Zjuchenyuan
·
Publicado
2019-10-07
·
Atualizado
2024-06-15
·
CVE-2019-17451
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.32
Description
The issue is related to an integer overflow in the Binary File Descriptor (BFD) library, specifically in the
bfd dwarf2 find nearest line function in dwarf2.c. This can lead to a segmentation fault (SEGV). The vulnerability is also described as affecting the bfd dwarf2 slurp debug info function and is related to an integer overflow, which can be exploited by a remote attacker to cause a denial of service.Recommendations
For GNU Binutils version 2.32, consider updating to a newer version that addresses the integer overflow issue in the BFD library. As a temporary workaround, consider restricting access to the
dwarf2.c component or the bfd dwarf2 find nearest line and bfd dwarf2 slurp debug info functions to minimize the risk of exploitation.Exploit
Correção
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Centos
Gnu Binutils
Red Hat
Suse
Ubuntu