CVE-2018-7570: Null Pointer Dereference
The assignfilepositionsfornonloadsections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7570?
CVE-2018-7570 is classified as a denial of service vulnerability.
How do I fix CVE-2018-7570?
To mitigate CVE-2018-7570, upgrade to a patched version of GNU Binutils, specifically versions after 2.30.
What types of attacks can exploit CVE-2018-7570?
CVE-2018-7570 can be exploited by remote attackers sending crafted ELF files to cause application crashes.
In which library is CVE-2018-7570 found?
CVE-2018-7570 is found in the Binary File Descriptor (BFD) library of GNU Binutils.
Which version of GNU Binutils is affected by CVE-2018-7570?
CVE-2018-7570 specifically affects GNU Binutils version 2.30.