CVE-2018-20002: Medium severity binutils vulnerability
Published Dec 10, 2018
·Updated
Last updated 24 July 2024
Other sources
The bfdgenericreadminisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.
— Launchpad
Affected Software
8 affected componentsFixes available
GNU binutils=2.31
NetApp Vasa Provider>=7.2
NetApp Cluster Data Ontap
F5 Traffix Signaling Delivery Controller>=5.0.0<=5.1.0
F5 Traffix Signaling Delivery Controller=4.4.0
All of the following
NetApp Vasa Provider>=7.2
NetApp Cluster Data Ontap
debian/binutils
2.35.2-22.40-22.44-3
Remediation
Patch Available
Event History
Dec 10, 2018
CVE Published
via MITRE·02:00 AM
Data Sourced
via MITRE·02:00 AM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:58 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·02:00 AM
RemedyDescriptionSeverityAffected Software
Feb 3, 2025
Data Sourced
via Debian·03:02 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2018-20002.
2
What is the severity of CVE-2018-20002?
The severity of CVE-2018-20002 is medium.
3
How does CVE-2018-20002 impact the affected software?
CVE-2018-20002 can cause a denial of service (memory consumption) in the affected software.
4
Is there a fix available for CVE-2018-20002?
Yes, there are fixed versions of the affected software available. Please refer to the vendor's advisory for more information.
5
Where can I find more information about CVE-2018-20002?
You can find more information about CVE-2018-20002 in the references provided: [1] [2] [3].