CVE-2018-7208

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

Score
CVSS 3.0 7.8 High
Status
Modified - cve@mitre.org
Published
2018-02-18
Last modified
2024-08-05
Weaknesses
CWE-20

Affected products

References

 
 
© AVABIS GmbH privacypolicy about