CVE-2018-20002: Medium severity GNU binutils vulnerability
Last updated 24 July 2024
Other sources
The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-20002.
What is the severity of CVE-2018-20002?
The severity of CVE-2018-20002 is medium.
How does CVE-2018-20002 impact the affected software?
CVE-2018-20002 can cause a denial of service (memory consumption) in the affected software.
Is there a fix available for CVE-2018-20002?
Yes, there are fixed versions of the affected software available. Please refer to the vendor's advisory for more information.
Where can I find more information about CVE-2018-20002?
You can find more information about CVE-2018-20002 in the references provided: [1] [2] [3].