UBUNTU-CVE-2018-20671

Details

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

Affected Packages

binutils

Ubuntu 18.04 LTS

Fixed in:

2.30-21ubuntu1~18.04.3

binutils

Ubuntu Pro 14.04 LTS

Fixed in:

2.24-5ubuntu14.2+esm5

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm1

References

REPORT

https://ubuntu.com/security/CVE-2018-20671

ADVISORY

https://ubuntu.com/security/notices/USN-4336-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-2

ADVISORY

https://ubuntu.com/security/notices/USN-6413-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-20671