REDHAT-BUG-1595427: Buffer Overflow

Published Jun 26, 2018

Updated

A flaw was found in finishstab in stabs.c in GNU Binutils 2.30 which allows attackers to cause a denial of service (heap-based buffer overflow) as demonstrated by an out-of-bounds write of 8 bytes.

References: https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 https://gcc.gnu.org/bugzilla/showbug.cgi?id=85454 https://sourceware.org/bugzilla/showbug.cgi?id=23057

Affected Software

1 affected component

GNU binutils

Event History

Jun 26, 2018

Data Sourced

via Red Hat·09:54 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1595427?

The severity of REDHAT-BUG-1595427 is classified as a denial of service vulnerability due to a heap-based buffer overflow.

How does the vulnerability REDHAT-BUG-1595427 affect GNU Binutils?

REDHAT-BUG-1595427 affects GNU Binutils by allowing attackers to perform an out-of-bounds write, potentially crashing the application.

What versions of GNU Binutils are affected by REDHAT-BUG-1595427?

The vulnerability REDHAT-BUG-1595427 specifically affects GNU Binutils version 2.30.

How can REDHAT-BUG-1595427 be mitigated?

Mitigation for REDHAT-BUG-1595427 can be achieved by updating to a patched version of GNU Binutils.

Are there any known exploits for REDHAT-BUG-1595427?

Yes, there are known exploits for REDHAT-BUG-1595427 that can demonstrate the heap-based buffer overflow in practice.