CVE-2018-19931
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based b...
Original description
The description as published by the source.
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2018-19931 binutils Fixed in: 2.32-r0
- Debian DEBIAN-CVE-2018-19931 binutils Fixed in: 2.32.51.20190707-1
References
- advisory securityfocus.com
- advisory security.gentoo.org
- advisory usn.ubuntu.com
- patch security.netapp.com
- patch sourceware.org
- web lists.opensuse.org
- web lists.opensuse.org
- web sourceware.org