PT-2018-2390 · Gnu+5 · Objcopy+7

Skysider · Published 2018-03-02 · Updated 2024-06-15 · CVE-2018-7642

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.30 and earlier

Description The issue is related to the swap std reloc in function in aoutx.h within the Binary File Descriptor (BFD) library, also known as libbfd. This function is vulnerable to a denial of service attack, where remote attackers can cause the application to crash due to a NULL pointer dereference in aout 32 swap std reloc out. This can be achieved by using a crafted ELF file, as demonstrated by the objcopy tool.

Recommendations For GNU Binutils versions 2.30 and earlier, consider updating to a version that includes a fix for the swap std reloc in function issue. As a temporary workaround, consider restricting the use of the swap std reloc in function until a patch is available. Avoid using the objcopy tool with untrusted ELF files until the issue is resolved.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALT-PU-2019-1204

ALT-PU-2019-1367

BDU:2019-00579

CESA-2018_3032

CVE-2018-7642

MGASA-2019-0169

OPENSUSE-SU-2018_3223-1

OPENSUSE-SU-2018_3323-1

OPENSUSE-SU-2019:2415-1

OPENSUSE-SU-2019:2432-1

OPENSUSE-SU-2019_2415-1

OPENSUSE-SU-2019_2432-1

OPENSUSE-SU-2024:10651-1

RHSA-2018:3032

RHSA-2018_3032

SUSE-SU-2018:3170-1

SUSE-SU-2018:3207-1

SUSE-SU-2018:3207-2

SUSE-SU-2019:2779-1

SUSE-SU-2019:2780-1

USN-4336-2

Affected Products

Alt Linux

Bfd Library

Centos

Gnu Binutils

Red Hat

Suse

Ubuntu

Objcopy

References · 808

• https://osv.dev/vulnerability/openSUSE-SU-2024:10651-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07788 · Security Note
• https://bdu.fstec.ru/vul/2023-07735 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9077 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12452 · Security Note
• https://ubuntu.com/security/CVE-2018-18700 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2019:2432-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01241 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18483 · Security Note
• https://ubuntu.com/security/CVE-2016-4490 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-18701 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9754 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2019:2415-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9742 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15022 · Security Note