CVE-2018-19931

Name of the Vulnerable Software and Affected Versions GNU Binutils versions through 2.31

Description An issue was discovered in the Binary File Descriptor (BFD) library, which is part of GNU Binutils. The problem is a heap-based buffer overflow in the bfd elf32 swap phdr in function, located in elfcode.h, due to the lack of restriction on the number of program headers. This could potentially allow an attacker to cause a denial of service.

Recommendations For GNU Binutils versions through 2.31, consider updating to a version that fixes this issue, as the current version is affected by a heap-based buffer overflow in the bfd elf32 swap phdr in function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.