Note:
This project will be discontinued after December 13, 2021. [more]
2018-12-07
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.
Products | Ubuntu_linux, Binutils, Vasa_provider |
Type | Out-of-bounds Write (CWE-787) |
First patch | - None (likely due to unavailable code) |
Links |
• https://security.gentoo.org/glsa/201908-01
• http://www.securityfocus.com/bid/106144 • https://usn.ubuntu.com/4336-1/ • http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html • http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html |