process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted binary file, as demonstrated by readelf.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/103976 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHBA-2019:0327 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:3032 | Third Party Advisory |
| https://security.gentoo.org/glsa/201908-01 | |
| https://sourceware.org/bugzilla/show_bug.cgi?id=23064 | Exploit Issue Tracking Third Party Advisory |
| https://usn.ubuntu.com/4336-1/ | |
| http://www.securityfocus.com/bid/103976 | Third Party Advisory VDB Entry |
| https://access.redhat.com/errata/RHBA-2019:0327 | Third Party Advisory |
| https://access.redhat.com/errata/RHSA-2018:3032 | Third Party Advisory |
| https://security.gentoo.org/glsa/201908-01 | |
| https://sourceware.org/bugzilla/show_bug.cgi?id=23064 | Exploit Issue Tracking Third Party Advisory |
| https://usn.ubuntu.com/4336-1/ |
Configurations
History
21 Nov 2024, 03:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/103976 - Third Party Advisory, VDB Entry | |
| References | () https://access.redhat.com/errata/RHBA-2019:0327 - Third Party Advisory | |
| References | () https://access.redhat.com/errata/RHSA-2018:3032 - Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/201908-01 - | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=23064 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://usn.ubuntu.com/4336-1/ - |
Information
Published : 2018-04-25 09:29
Updated : 2024-11-21 03:41
NVD link : CVE-2018-10372
Mitre link : CVE-2018-10372
CVE.ORG link : CVE-2018-10372
JSON object : View
Products Affected
gnu
- binutils
redhat
- enterprise_linux_desktop
- enterprise_linux_server
- enterprise_linux_workstation
CWE
CWE-125
Out-of-bounds Read