CVE-2018-19932
MEDIUMGNU Binutils < 2.31 - Integer Overflow and Infinite Loop in BFD Library
Title source: llmDescription
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.
References (8)
Core 8
Core References
Patch, Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20190221-0004/
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/106144
Patch x_refsource_misc
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=beab453223769279cc1cef68a1622ab8978641f7
Exploit, Issue Tracking, Patch x_refsource_misc
https://sourceware.org/bugzilla/show_bug.cgi?id=23932
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/201908-01
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
Mailing List vendor-advisory
x_refsource_suse
http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
Vendor Advisory vendor-advisory
x_refsource_ubuntu
https://usn.ubuntu.com/4336-1/
Scores
CVSS v3
5.5
EPSS
0.0042
EPSS Percentile
62.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Details
CWE
CWE-190
Status
published
Products (2)
gnu/binutils
< 2.31
netapp/vasa_provider
7.2
Published
Dec 07, 2018
Tracked Since
Feb 18, 2026