CVE-2018-20623

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31.1

Description The issue is related to a use-after-free error in the error function in elfcomm.c, which can be triggered by a crafted ELF file. This can potentially allow an attacker to cause a denial of service.

Recommendations For GNU Binutils version 2.31.1, consider avoiding the use of crafted ELF files until a patch is available. As a temporary workaround, restrict access to the error function in elfcomm.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.