REDHAT-BUG-1551778
First published: Mon Mar 05 2018(Updated: )
A flaw was found in the read_attribute_value function in dwarf2.c file in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils up to version 2.30, when compiled in 32bit mode. This allows attackers to cause a denial of service (integer wraparound and application crash) via an ELF file with a corrupt DWARF FORM block. References: <a href="https://sourceware.org/bugzilla/show_bug.cgi?id=22895">https://sourceware.org/bugzilla/show_bug.cgi?id=22895</a> Patch: <a href="https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=12c963421d045a127c413a0722062b9932c50aa9">https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=12c963421d045a127c413a0722062b9932c50aa9</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu/binutils | <2.30 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://sourceware.org/bugzilla/show_bug.cgi?id=22895
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=12c963421d045a127c413a0722062b9932c50aa9
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1551779
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1551780
- https://access.redhat.com/errata/RHSA-2018:3032
- https://bugzilla.redhat.com/show_bug.cgi?id=1551778
Frequently Asked Questions
What is the severity of REDHAT-BUG-1551778?
The severity of REDHAT-BUG-1551778 is classified as high due to its potential to cause a denial of service.
How do I fix REDHAT-BUG-1551778?
To fix REDHAT-BUG-1551778, users should upgrade to a newer version of GNU Binutils beyond version 2.30.
Which versions of GNU Binutils are affected by REDHAT-BUG-1551778?
REDHAT-BUG-1551778 affects GNU Binutils versions up to and including 2.30 when compiled in 32-bit mode.
What type of vulnerability is REDHAT-BUG-1551778?
REDHAT-BUG-1551778 is a denial of service vulnerability caused by an integer wraparound in the read_attribute_value function.
Can REDHAT-BUG-1551778 be exploited remotely?
Yes, REDHAT-BUG-1551778 can potentially be exploited remotely by an attacker to crash the application.
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2018-7569
- agent/source
- agent/severity
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/gnu
- canonical/ubuntu/binutils