CVE-2018-6872
binutils: The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...
CVE-2018-6872 is fixed in 41 products on 1 platform, first by binutils 2.30-20ubuntu2~18.04, released February 8, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0217
82nd percentile
The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| binutils · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-aarch64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-aarch64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-alpha-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-alpha-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-arm-linux-gnueabi · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-arm-linux-gnueabi 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-arm-linux-gnueabihf · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-arm-linux-gnueabihf 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-common · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-common 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-for-build · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-for-build 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-for-host · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-for-host 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-hppa-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-hppa-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-hppa64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-hppa64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-i686-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-i686-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-i686-kfreebsd-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-i686-kfreebsd-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-i686-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-i686-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-ia64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-ia64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-m68k-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-m68k-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mips-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mips-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mips64-linux-gnuabi64 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mips64-linux-gnuabi64 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mips64-linux-gnuabin32 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mips64-linux-gnuabin32 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mips64el-linux-gnuabi64 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mips64el-linux-gnuabi64 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mips64el-linux-gnuabin32 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mips64el-linux-gnuabin32 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsel-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsel-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa32r6-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa32r6-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa32r6el-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa32r6el-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa64r6-linux-gnuabi64 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa64r6-linux-gnuabi64 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa64r6-linux-gnuabin32 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa64r6-linux-gnuabin32 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa64r6el-linux-gnuabi64 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa64r6el-linux-gnuabi64 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-mipsisa64r6el-linux-gnuabin32 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-mipsisa64r6el-linux-gnuabin32 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-multiarch · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-multiarch 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-powerpc-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-powerpc-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-powerpc-linux-gnuspe · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-powerpc-linux-gnuspe 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-powerpc64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-powerpc64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-powerpc64le-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-powerpc64le-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-riscv64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-riscv64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-s390x-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-s390x-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-sh4-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-sh4-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-source · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-source 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-sparc64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-sparc64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-x86-64-kfreebsd-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-x86-64-kfreebsd-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-x86-64-linux-gnu · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-x86-64-linux-gnu 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| binutils-x86-64-linux-gnux32 · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | binutils-x86-64-linux-gnux32 2.30-20ubuntu2~18.04 | Feb 8, 2018 |
| libbinutils · Ubuntu 18.04.6 LTS (bionic) | 2.30-20ubuntu2~18.04 | libbinutils 2.30-20ubuntu2~18.04 | Feb 8, 2018 |