NULL pointer dereference in Binutils - CVE-2018-7570

Vulnerability identifier: #VU11088

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-7570

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause DoS condition on the target system.

The weakness exists in the assign_file_positions_for_non_load_sections function due to the improper processing of crafted Executable and Linkable Format (ELF) files that contain a RELRO segment that lacks a matching LOAD segment. A remote attacker can send a specially crafted ELF file, trick the victim into opening it, trigger NULL pointer dereference and cause the service to crash.

Binutils
Gentoo Linux
binutils (Alpine package)

Install update from vendor's website.

binutils (Alpine package) - update to 2.30-r2

• https://sourceware.org/bugzilla/show_bug.cgi?id=22881

• Denial of service in GNU Binutils
• NULL pointer dereference in binutils (Alpine package)
• Gentoo update for Binutils