Skip to content
OpenAdvisories
Unscored CVE-2018-5392 EUVD-2018-17162GHSA-x4v8-qgp4-6739

mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR

Published Aug 14, 2018 · Updated Aug 5, 2024 · Assigned by certcc

Description

mingw-w64 version 5.0.4 by default produces executables that opt in to ASLR, but are not compatible with ASLR. ASLR is an exploit mitigation technique used by modern Windows platforms. For ASLR to function, Windows executables must contain a relocations table. Despite containing the "Dynamic base" PE header, which indicates ASLR compatibility, Windows executables produced by mingw-w64 have the relocations table stripped from them by default. This means that executables produced by mingw-w64 are vulnerable to return-oriented programming (ROP) attacks. Windows executables generated by mingw-w64 claim to be ASLR compatible, but are not. Vulnerabilities in such executables are more easily exploitable as a result.

Affected products

VendorProductAffectedFixed
mingw mingw-w64 5.0.4 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 mingw-w64 No fix yet —
Debian 13 mingw-w64 No fix yet —
Debian 12 mingw-w64 No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 mingw-w64 No fix yet —
Ubuntu 26.04 LTS mingw-w64 No fix yet —
Ubuntu 25.10 mingw-w64 No fix yet —
Ubuntu 24.04 LTS mingw-w64 No fix yet —
Ubuntu 22.04 LTS mingw-w64 No fix yet —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS mingw-w64 No fix yet —
Ubuntu 18.04 LTS mingw-w64 No fix yet —
Ubuntu 16.04 LTS mingw-w64 No fix yet —
Ubuntu 14.04 LTS mingw-w64 No fix yet —

References