CVE-2019-17451

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32

Description The issue is related to an integer overflow in the Binary File Descriptor (BFD) library, specifically in the bfd dwarf2 find nearest line function in dwarf2.c. This can lead to a segmentation fault (SEGV). The vulnerability is also described as affecting the bfd dwarf2 slurp debug info function and is related to an integer overflow, which can be exploited by a remote attacker to cause a denial of service.

Recommendations For GNU Binutils version 2.32, consider updating to a newer version that addresses the integer overflow issue in the BFD library. As a temporary workaround, consider restricting access to the dwarf2.c component or the bfd dwarf2 find nearest line and bfd dwarf2 slurp debug info functions to minimize the risk of exploitation.