Published: 04/01/2019 Updated: 07/11/2023

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

load_specific_debug_section in objdump.c in GNU Binutils up to and including 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnu binutils

Several security issues were fixed in GNU binutils ...

load_specific_debug_section in objdumpc in GNU Binutils through 2311 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size ...

CWE-787 CWE-190 https://sourceware.org/bugzilla/show_bug.cgi?id=24005 http://www.securityfocus.com/bid/106457 http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html https://usn.ubuntu.com/4336-1/https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=11fa9f134fd658075c6f74499c780df045d9e9ca https://nvd.nist.gov https://usn.ubuntu.com/4336-1/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2018-20671

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect