REDHAT-BUG-2167498: Low severity GNU binutils vulnerability
In Binutils, the field filetable of struct module module is created without being initialized, and then its uninitialized field is used to assign file, which is a pointer to a global variable filename. Later on when this variable is used, a segmentation fault occurs.
Upstream bug:
https://sourceware.org/bugzilla/showbug.cgi?id=29892
Upstream fix:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=65cf035b8dc1df5d8020e0b1449514a3c42933e7
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2167498?
The severity of REDHAT-BUG-2167498 is critical due to the segmentation fault it can cause.
What software is affected by REDHAT-BUG-2167498?
REDHAT-BUG-2167498 affects the GNU Binutils software.
How do I fix REDHAT-BUG-2167498?
To fix REDHAT-BUG-2167498, update to the latest patched version of GNU Binutils.
What causes the issue in REDHAT-BUG-2167498?
The issue in REDHAT-BUG-2167498 is caused by the uninitialized `file_table` field in the `struct module`.
Is there a workaround for REDHAT-BUG-2167498?
There is no official workaround for REDHAT-BUG-2167498; applying the patch is the recommended approach.