CVE-2018-6543
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in `malloc()` with 0 size....
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In GNU Binutils 2.30, there's an integer overflow in the function load_specific_debug_section() in objdump.c, which results in malloc() with 0 size. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2018-6543 binutils Corrigé dans: 2.30-3
Références
- advisory securityfocus.com
- advisory security.gentoo.org
- report sourceware.org
- web lists.opensuse.org
- web lists.opensuse.org