CVE-2018-20002
Fixed in a distro release EPSS 2%
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.
Products: gnu binutils, netapp vasa_provider, f5 traffix_signaling_delivery_controller
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.10 | binutils | 2.32-r0 |
| Alpine 3.11 | binutils | 2.32-r0 |
| Alpine 3.12 | binutils | 2.32-r0 |
| Alpine 3.13 | binutils | 2.32-r0 |
| Alpine 3.14 | binutils | 2.32-r0 |
| Alpine 3.15 | binutils | 2.32-r0 |
| Alpine 3.16 | binutils | 2.32-r0 |
| Alpine 3.17 | binutils | 2.32-r0 |
| Alpine 3.18 | binutils | 2.32-r0 |
| Alpine 3.19 | binutils | 2.32-r0 |
| Alpine 3.20 | binutils | 2.32-r0 |
| Alpine 3.21 | binutils | 2.32-r0 |
| Alpine 3.22 | binutils | 2.32-r0 |
| Alpine 3.23 | binutils | 2.32-r0 |
| Alpine 3.24 | binutils | 2.32-r0 |
| Arch Linux | binutils | 2.32-1 |
| Debian 12 | binutils | 2.32.51.20190707-1 |
| Debian 13 | binutils | 2.32.51.20190707-1 |
| Debian 14 | binutils | 2.32.51.20190707-1 |
| Ubuntu 18.04 LTS | binutils | 2.30-21ubuntu1~18.04.3 |
| Ubuntu Pro 14.04 LTS | binutils | no fix |
| Ubuntu Pro 16.04 LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm1 |