CVE-2018-10372

Summary

CVE	CVE-2018-10372
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2018-04-25 09:29:00 UTC
Updated	2019-08-03 13:15:00 UTC
Description	process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.

Risk And Classification

Problem Types: CWE-125

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Gnu	Binutils	2.30	All	All	All
Application	Gnu	Binutils	2.30	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Desktop	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Server	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Server	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	7.0	All	All	All
Operating System	Redhat	Enterprise Linux Workstation	7.0	All	All	All

References

Reference	Source	Link	Tags
GNU Binutils CVE-2018-10372 Remote Buffer Overflow Vulnerability	BID	www.securityfocus.com	Third Party Advisory, VDB Entry
Binutils: Multiple vulnerabilities (GLSA 201908-01) — Gentoo security	GENTOO	security.gentoo.org
Red Hat Customer Portal	REDHAT	access.redhat.com	Third Party Advisory
23064 – Buffer overflow (read of size 8) in Dwarf	MISC	sourceware.org	Exploit, Issue Tracking, Third Party Advisory
USN-4336-1: GNU binutils vulnerabilities \| Ubuntu security notices	UBUNTU	usn.ubuntu.com
Red Hat Customer Portal	REDHAT	access.redhat.com	Third Party Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

710158 Gentoo Linux Binutils Multiple vulnerabilities (GLSA 201908-01)