Skip to content
OpenAdvisories
Unscored CVE-2018-7208 EUVD-2018-18948GHSA-6p42-xfj6-9ggh

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2…

Published Feb 18, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Package: binutils Package: binutils Package: binutils Ecosystem: Alpine Ecosystem: Debian Ecosystem: Ubuntu

Description

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 binutils 2.30-6 —
Debian 13 binutils 2.30-6 —
Debian 12 binutils 2.30-6 —

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS binutils 2.26.1-1ubuntu1~16.04.8+esm1 USN-4336-2
Ubuntu Pro 14.04 LTS binutils No fix yet —

Red Hat

Security tracker ↗
ReleasePackageFixed inAdvisory
RHEL 7 binutils +1 2.27-34.base.el7 RHSA-2018:3032

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP5 gdb 13.2-150400.15.14.1 SUSE-SU-2024:0898-1
SLES 15 SP4 gdb 13.2-150400.15.14.1 SUSE-SU-2024:0898-1
SLES 15 SP3 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SLES 15 SP2 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SLES 15 SP1 binutils 2.32-7.5.1 SUSE-SU-2019:2779-1
Show 19 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 15 binutils 2.31-6.3.1 SUSE-SU-2019:2780-1, SUSE-SU-2018:3170-1
SLES 12 SP5 gdb 12.1-2.20.1 SUSE-SU-2024:0319-1, SUSE-SU-2023:2485-1
SLES 12 SP3 binutils +2 2.31-9.26.1 SUSE-SU-2018:3207-1
SLES 12 SP2 binutils 2.31-9.26.1 SUSE-SU-2018:3207-2, SUSE-SU-2018:3207-1
SLES 12 SP1 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SLES 12 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SLES for SAP 15 SP4 gdb 13.2-150400.15.14.1 SUSE-SU-2024:0898-1
SLES for SAP 15 SP3 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SLES for SAP 15 SP2 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SLES for SAP 12 SP5 gdb 12.1-2.20.1 SUSE-SU-2024:0319-1, SUSE-SU-2023:2485-1
SLES for SAP 12 SP3 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SLES for SAP 12 SP2 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SLES for SAP 12 SP1 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SLE HPC 15 SP4 gdb 13.2-150400.15.14.1 SUSE-SU-2024:0898-1
SLE HPC 15 SP3 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SLE HPC 15 SP2 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SUSE OpenStack Cloud 7 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1
SUSE Enterprise Storage 7.1 gdb 13.2-150100.8.39.1 SUSE-SU-2024:0899-1
SUSE Enterprise Storage 4 binutils 2.31-9.26.1 SUSE-SU-2018:3207-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed binutils 2.37-1.3 openSUSE-SU-2024:10651-1
openSUSE Tumbleweed gdb 12.1-6.1 openSUSE-SU-2024:12745-1
openSUSE Leap 15.5 gdb 13.2-150400.15.14.1 SUSE-SU-2024:0898-1
openSUSE Leap 15.5 gdb-testresults 13.2-150400.15.14.4 SUSE-SU-2024:0898-1
openSUSE Leap 15.1 binutils +20 2.32-lp151.3.3.1 openSUSE-SU-2019:2432-1
openSUSE Leap 15.0 binutils 2.32-lp150.10.1 openSUSE-SU-2019:2415-1

Alpine

Security tracker ↗
ReleasePackageFixed inAdvisory
Alpine v3.8 binutils 2.30-r6 —
Alpine v3.7 binutils 2.30-r2 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 binutils +1 2.29.1-27.amzn2.0.1 ALAS2-2019-1185, ALAS2-2019-1138

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 7 binutils +1 2.27-34.base.0.1.el7 ELSA-2018-3032

Advisories 19

References