CVE-2018-18606: Null Pointer Dereference
An issue was discovered in the mergestrings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in bfdaddmergesection when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-18606.
What is the affected software?
The affected software is Binutils.
How does the vulnerability occur?
The vulnerability occurs in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.
What is the severity of CVE-2018-18606?
The severity of CVE-2018-18606 is not specified.
Is there a fix for CVE-2018-18606?
Yes, there are fixes available for different versions of Binutils.