REDHAT-BUG-1551771: Integer Overflow
A flaw was found in the parsedie function in dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils up to version 2.30, when compiled in 32bit mode. This vulnerability allows attackers to cause a denial of service (integer overflow and application crash) via an ELF file with corrupted dwarf1 debug information.
References: https://sourceware.org/bugzilla/showbug.cgi?id=22894
Patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=eef104664efb52965d85a28bc3fc7c77e52e48e2
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1551771?
REDHAT-BUG-1551771 has a severity that can lead to denial of service due to an integer overflow and application crash.
How do I fix REDHAT-BUG-1551771?
To fix REDHAT-BUG-1551771, upgrade to a version of GNU Binutils greater than 2.30.
Which software is affected by REDHAT-BUG-1551771?
REDHAT-BUG-1551771 affects GNU Binutils up to version 2.30 and the BFD library (libbfd) in the same version range.
What causes the vulnerability in REDHAT-BUG-1551771?
The vulnerability in REDHAT-BUG-1551771 is caused by a flaw in the parse_die function within the BFD library when running in 32-bit mode.
Is REDHAT-BUG-1551771 a remote exploitation risk?
REDHAT-BUG-1551771 does not pose a direct remote exploitation risk as it primarily leads to a local denial of service.