GNU binutils 2.31 BFD Library syms.c _bfd_stab_section_find_nearest_line memory corruption

Summaryinfo

A vulnerability classified as problematic has been found in GNU binutils 2.31. This issue affects the function _bfd_stab_section_find_nearest_line of the file syms.c of the component BFD Library. The manipulation leads to memory corruption. This vulnerability is listed as CVE-2018-17358. The attack must be carried out locally. There is no available exploit.

Detailsinfo

A vulnerability was found in GNU binutils 2.31 (Programming Tool Software) and classified as problematic. This issue affects the function _bfd_stab_section_find_nearest_line of the file syms.c of the component BFD Library. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is availability. The summary by CVE is:

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.

The bug was discovered 09/20/2018. The weakness was presented 09/23/2018 (Website). It is possible to read the advisory at sourceware.org. The identification of this vulnerability is CVE-2018-17358 since 09/23/2018. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details of the vulnerability are known, but there is no available exploit.

The vulnerability was handled as a non-public zero-day exploit for at least 3 days. During that time the estimated underground price was around $0-$5k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-124404 for similar entry. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Programming Tool Software

Vendor

• GNU

Name

• binutils

Version

• 2.31

License

• open-source

Website

• Vendor: https://www.gnu.org/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion