CVE-2018-17360: Medium severity binutils vulnerability
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfdgetl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-17360?
CVE-2018-17360 is a vulnerability in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
What is the severity of CVE-2018-17360?
The severity of CVE-2018-17360 is not specified in the provided information.
How does CVE-2018-17360 impact the affected software?
CVE-2018-17360 allows an attacker to cause a denial of service through a crafted PE file.
Which versions of binutils are affected by CVE-2018-17360?
CVE-2018-17360 affects binutils versions 2.26.1-1ubuntu1~16.04.8+ and 2.30-21ubuntu1~18.04.3.
How can I fix CVE-2018-17360?
To fix CVE-2018-17360, update binutils to version 2.26.1-1ubuntu1~16.04.8+ or 2.30-21ubuntu1~18.04.3, depending on the affected version.