This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2018-19931 →

DEBIAN-CVE-2018-19931

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based b...

Original description

The description as published by the source.

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]

References

advisory security-tracker.debian.org