NULL pointer dereference in Binutils - CVE-2018-7642
Published: March 28, 2018
Vulnerability identifier: #VU11310
CSH Severity: Low
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-7642
CWE-ID: CWE-476
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The weakness exists due to improper bounds checking when using the swap_std_reloc_in function, as defined in the aoutx.h source code file in the Binary File Descriptor (BFD) library. A remote attacker can submit a specially crafted ELF file, trigger NULL pointer dereference and cause the service to crash.
The weakness exists due to improper bounds checking when using the swap_std_reloc_in function, as defined in the aoutx.h source code file in the Binary File Descriptor (BFD) library. A remote attacker can submit a specially crafted ELF file, trigger NULL pointer dereference and cause the service to crash.
Affected software
Binutils
Gentoo Linux
binutils (Alpine package)
Gentoo Linux
binutils (Alpine package)
How to mitigate CVE-2018-7642
Install update from vendor's website.
binutils (Alpine package) - update to 2.30-r2