Denial of service in GNU Binutils



Published: 2018-04-27
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2018-10372
CWE-ID CWE-126
Exploitation vector Network
Public exploit Public exploit code for vulnerability #1 is available.
Vulnerable software
Subscribe 		Binutils
Universal components / Libraries / Libraries used by multiple products

Vendor GNU

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Heap-based buffer over-read

EUVDB-ID: #VU12279

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C]

CVE-ID: CVE-2018-10372

CWE-ID: CWE-126 - Buffer over-read

Exploit availability: No

Description

The vulnerability allows a remote unauthenticated attacker to cause Dos condition on the target system.

The weakness exists in the process_cu_tu_index function in the dwarf.c source code file due to improper bounds checking when used to process binary files. A remote attacker can trick the victim into opening a specially crafted binary file, as demonstrated by readelf, trigger heap-based buffer overread and cause the service to crash.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Binutils: 2.30

CPE2.3 External links

http://sourceware.org/bugzilla/show_bug.cgi?id=23064


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.



###SIDEBAR###