{
  "cveId": "CVE-2018-6872",
  "url": "https://patchblox.com/security/cve/CVE-2018-6872",
  "summary": "CVE-2018-6872 is fixed in 41 products on 1 platform, first by binutils 2.30-20ubuntu2~18.04, released February 8, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "binutils: The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU...",
  "description": "The elf_parse_notes function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (out-of-bounds read and segmentation violation) via a note with a large alignment.",
  "published": "2018-02-08T22:29:00Z",
  "severity": "Low",
  "epss": 0.02167,
  "epssPercentile": 0.82333,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "binutils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-aarch64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-aarch64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-aarch64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-alpha-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-alpha-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-alpha-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-arm-linux-gnueabi",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-arm-linux-gnueabi 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-arm-linux-gnueabi-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-arm-linux-gnueabihf",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-arm-linux-gnueabihf 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-arm-linux-gnueabihf-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-common",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-common 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-common-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-for-build",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-for-build 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-for-build-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-for-host",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-for-host 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-for-host-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-hppa-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-hppa-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-hppa-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-hppa64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-hppa64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-hppa64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-i686-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-i686-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-i686-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-i686-kfreebsd-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-i686-kfreebsd-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-i686-kfreebsd-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-i686-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-i686-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-i686-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-ia64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-ia64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-ia64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-m68k-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-m68k-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-m68k-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mips-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mips-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mips-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mips64-linux-gnuabi64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mips64-linux-gnuabi64 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mips64-linux-gnuabi64-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mips64-linux-gnuabin32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mips64-linux-gnuabin32 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mips64-linux-gnuabin32-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mips64el-linux-gnuabi64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mips64el-linux-gnuabi64 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mips64el-linux-gnuabi64-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mips64el-linux-gnuabin32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mips64el-linux-gnuabin32 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mips64el-linux-gnuabin32-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsel-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsel-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsel-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa32r6-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa32r6-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa32r6-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa32r6el-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa32r6el-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa32r6el-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa64r6-linux-gnuabi64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa64r6-linux-gnuabi64 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa64r6-linux-gnuabi64-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa64r6-linux-gnuabin32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa64r6-linux-gnuabin32 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa64r6-linux-gnuabin32-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa64r6el-linux-gnuabi64",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa64r6el-linux-gnuabi64 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa64r6el-linux-gnuabi64-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-mipsisa64r6el-linux-gnuabin32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-mipsisa64r6el-linux-gnuabin32 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-mipsisa64r6el-linux-gnuabin32-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-multiarch",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-multiarch 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-multiarch-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-powerpc-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-powerpc-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-powerpc-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-powerpc-linux-gnuspe",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-powerpc-linux-gnuspe 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-powerpc-linux-gnuspe-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-powerpc64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-powerpc64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-powerpc64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-powerpc64le-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-powerpc64le-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-powerpc64le-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-riscv64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-riscv64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-riscv64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-s390x-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-s390x-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-s390x-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-sh4-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-sh4-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-sh4-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-source",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-source 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-source-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-sparc64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-sparc64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-sparc64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-x86-64-kfreebsd-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-x86-64-kfreebsd-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-x86-64-kfreebsd-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-x86-64-linux-gnu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-x86-64-linux-gnu 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-x86-64-linux-gnu-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "binutils-x86-64-linux-gnux32",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "binutils-x86-64-linux-gnux32 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-binutils-x86-64-linux-gnux32-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libbinutils",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.30-20ubuntu2~18.04",
      "fix": "libbinutils 2.30-20ubuntu2~18.04",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libbinutils-2.30-20ubuntu2-18.04",
      "released": "2018-02-08T22:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}