REDHAT-BUG-1574697: Null Pointer Dereference
A flaw was found in the ignoresectionsym function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, does not validate the outputsection pointer in the case of a symtab entry with a "SECTION" type that has a "0" value, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file, as demonstrated by objcopy.
References: https://sourceware.org/bugzilla/showbug.cgi?id=23113
Patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=db0c309f4011ca94a4abc8458e27f3734dab92ac
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1574697?
The severity of REDHAT-BUG-1574697 is critical due to the potential for remote attack exploitation.
How do I fix REDHAT-BUG-1574697?
To fix REDHAT-BUG-1574697, update your GNU Binutils to a version that addresses this vulnerability.
Which versions of GNU Binutils are affected by REDHAT-BUG-1574697?
REDHAT-BUG-1574697 affects GNU Binutils versions prior to 2.30.
What types of software are impacted by REDHAT-BUG-1574697?
REDHAT-BUG-1574697 impacts software using the Binary File Descriptor (BFD) library, specifically GNU Binutils and its components.
Is there a public exploit available for REDHAT-BUG-1574697?
Yes, there are reports indicating that REDHAT-BUG-1574697 may be exploitable, warranting immediate attention.