CVE-2018-6323
Summary
| CVE | CVE-2018-6323 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-01-26 08:29:00 UTC |
| Updated | 2019-10-31 01:15:00 UTC |
| Description | The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GNU Binutils CVE-2018-6323 Integer Overflow Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| [security-announce] openSUSE-SU-2019:2415-1: moderate: Security update f | SUSE | lists.opensuse.org | |
| GNU binutils 2.26.1 - Integer Overflow (PoC) - Windows dos Exploit | EXPLOIT-DB | www.exploit-db.com | Exploit, Third Party Advisory, VDB Entry |
| [security-announce] openSUSE-SU-2019:2432-1: moderate: Security update f | SUSE | lists.opensuse.org | |
| 22746 – crash when running 32-bit objdump on corrupted file | CONFIRM | sourceware.org | Exploit, Issue Tracking, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 199644 Ubuntu Security Notification for GNU binutils Vulnerabilities (USN-4336-3)