CVE-2018-20651: Null Pointer Dereference
A NULL pointer dereference was discovered in elflinkaddobjectsymbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ETDYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-20651.
What is the severity of CVE-2018-20651?
The severity of CVE-2018-20651 is not provided.
How does CVE-2018-20651 occur?
CVE-2018-20651 occurs due to a NULL pointer dereference in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library.
What can a specially crafted ELF file do to exploit CVE-2018-20651?
A specially crafted ELF file can allow remote attackers to cause a NULL pointer dereference, resulting in a denial of service.
How can I fix CVE-2018-20651?
To fix CVE-2018-20651, update the affected software to the recommended versions or apply the provided remedies.