CVE-2018-18309

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address deref...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in read_reloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing _bfd_clear_contents bounds checking.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2018-18309 binutils 修正版: 2.32.51.20190707-1

参照URL

advisory securityfocus.com
patch sourceware.org
web lists.opensuse.org
web lists.opensuse.org
web sourceware.org
web usn.ubuntu.com