PT-2018-2448 · Gnu+3 · Gnu Binutils+3

Wcventure · Published 2018-10-23 · Updated 2024-06-15 · CVE-2018-18605

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31

Description The issue is related to a heap-based buffer over-read in the sec merge hash lookup function, located in merge.c, which is part of the Binary File Descriptor (BFD) library. This occurs when the section size is not a multiple of the entry size, leading to incorrect memory access. Exploitation of this issue can cause a denial of service. A specially crafted ELF file can be used by remote attackers to trigger this issue.

Recommendations For GNU Binutils version 2.31, consider updating to a newer version that includes a fix for this issue. As a temporary workaround, restrict the use of the sec merge hash lookup function in merge.c to minimize the risk of exploitation. Avoid processing specially crafted ELF files until the issue is resolved.

Exploit

Fix

DoS

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

BDU:2019-00670

CVE-2018-18605

OPENSUSE-SU-2019:2415-1

OPENSUSE-SU-2019:2432-1

OPENSUSE-SU-2019_2415-1

OPENSUSE-SU-2019_2432-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2019:2650-1

SUSE-SU-2019:2779-1

SUSE-SU-2019:2780-1

USN-4336-1

USN-4336-2

Affected Products

Astra Linux

Gnu Binutils

Suse

Ubuntu

References · 651

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=23804 · Exploit
• https://ubuntu.com/security/CVE-2016-4492 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744 · Security Note
• https://ubuntu.com/security/CVE-2016-4487 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17360 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00670 · Security Note
• https://ubuntu.com/security/CVE-2017-14130 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9748 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-17985 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7209 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9751 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19931 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17121 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-18605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9038 · Vendor Advisory