Gnu · Binutils · CVE-2018-1000876
**Name of the Vulnerable Software and Affected Versions**
binutils versions 2.32 and earlier
**Description**
The issue is related to an integer overflow vulnerability in the objdump component of the GNU Binutils software development tool. This vulnerability can be exploited to gain access to confidential data, compromise data integrity, and cause a denial of service. The vulnerability is located in the `bfd get dynamic reloc upper bound` and `bfd canonicalize dynamic reloc` functions. Successful exploitation can lead to the execution of arbitrary code, and this attack appears to be exploitable locally.
**Recommendations**
For binutils version 2.32 and earlier, update to a version that includes the fix after commit 3a551c7a1b80fca579461774860574eabfd7f18f to resolve the issue. As a temporary workaround, consider restricting access to the objdump component until a patch is available.