CVE-2018-18309: Buffer Overflow
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory address dereference was discovered in readreloc in reloc.c. The vulnerability causes a segmentation fault and application crash, which leads to denial of service, as demonstrated by objdump, because of missing bfdclearcontents bounds checking.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-18309?
CVE-2018-18309 is a vulnerability in the Binary File Descriptor (BFD) library, as distributed in GNU Binutils 2.31.
What is the impact of CVE-2018-18309?
The vulnerability causes a segmentation fault and application crash, leading to denial of service.
Which software is affected by CVE-2018-18309?
The affected software includes binutils versions 2.30-21ubuntu1~18.04.3, 2.26.1-1ubuntu1~16.04.8+, and 2.31.1-16.
How can I fix CVE-2018-18309?
To fix CVE-2018-18309, upgrade to a version of binutils that is equal to or higher than 2.31.1-16.
Where can I find more information about CVE-2018-18309?
You can find more information about CVE-2018-18309 at the following references: [sourceware.org/bugzilla/show_bug.cgi?id=23770](sourceware.org/bugzilla/show_bug.cgi?id=23770), [sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=0930cb3021b8078b34cf216e79eb8608d017864f](sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=0930cb3021b8078b34cf216e79eb8608d017864f), [securityfocus.com/bid/105692](securityfocus.com/bid/105692)