vulnerability

Oracle Solaris 11: CVE-2018-7569: Vulnerability in GNU binary utilities

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
Feb 28, 2018
Added
May 30, 2019
Modified
Feb 17, 2022

Description

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.

Solutions

oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-32-0-11-4-9-0-1-1-0
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.