Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2018-13033 →
DEBIAN-CVE-2018-13033
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (exce...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
binutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30.90.20180627-1"}]}]
Debian:13
binutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30.90.20180627-1"}]}]
Debian:14
binutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30.90.20180627-1"}]}]
Références
- advisory security-tracker.debian.org