CVE-2019-9072

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32

Description A problem has been discovered in the Binary File Descriptor (BFD) library, also known as libbfd, as distributed in GNU Binutils. The issue is an attempted excessive memory allocation in the setup group function in elf.c.

Recommendations For GNU Binutils version 2.32, consider updating to a newer version to mitigate the risk, as the issue is related to an attempted excessive memory allocation in the setup group function. As a temporary workaround, consider restricting access to the elf.c file or the setup group function until a patch is available.