CVE-2018-10534: Medium severity GNU binutils vulnerability
A flaw was found in the bfdXXbfdcopyprivatebfddatacommon function in peXXigen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, processes a negative Data Directory size with an unbounded loop that increases the value of (externalIMAGEDEBUGDIRECTORY) edd so that the address exceeds its own memory region, resulting in an out-of-bounds memory write, as demonstrated by objcopy copying private info with bfdpex64bfdcopyprivatebfddatacommon in pex64igen.c.
References: https://sourceware.org/bugzilla/showbug.cgi?id=23110
Patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=aa4a8c2a2a67545e90c877162c53cc9de42dc8b4
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-10534?
CVE-2018-10534 is a vulnerability in the Binary File Descriptor (BFD) library, as distributed in GNU Binutils 2.30, that allows for an unbounded loop with a negative Data Directory size.
How does CVE-2018-10534 affect Ubuntu?
CVE-2018-10534 affects Ubuntu versions 18.04.3 (Bionic) and 16.04.8+ (Xenial) with binutils package versions 2.30-21ubuntu1~18.04.3 and 2.26.1-1ubuntu1~16.04.8+, respectively.
What is the severity of CVE-2018-10534?
CVE-2018-10534 has a low severity with a severity value of 1.
How can I fix CVE-2018-10534 on Ubuntu?
To fix CVE-2018-10534 on Ubuntu, you should update the binutils package to version 2.30-21ubuntu1~18.04.3 for Bionic or version 2.26.1-1ubuntu1~16.04.8+ for Xenial.
Where can I find more information about CVE-2018-10534?
You can find more information about CVE-2018-10534 at the following references: [Sourceware Bugzilla](https://sourceware.org/bugzilla/show_bug.cgi?id=23110), [SecurityFocus](http://www.securityfocus.com/bid/104025), [Red Hat Advisory](https://access.redhat.com/errata/RHSA-2018:3032).