QwikSec

Security Database

CVE

CWE

Training

CVE-2018-7570

Published: Feb 28, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

The assign_file_positions_for_non_load_sections function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an ELF file with a RELRO segment that lacks a matching LOAD segment, as demonstrated by objcopy.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vendor-advisory

x_refsource_GENTOO

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=01f7e10cf2dcf403462b2feed06c43135651556d

x_refsource_MISC

https://sourceware.org/bugzilla/show_bug.cgi?id=22881

x_refsource_MISC

openSUSE-SU-2019:2415

vendor-advisory

x_refsource_SUSE

openSUSE-SU-2019:2432

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.