CVE-2018-6759

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30

Description The issue is related to the bfd get debug link info 1 function in opncls.c, which lacks a check on the result of the strnlen function. This can be exploited by a remote attacker to cause a denial of service, potentially leading to a segmentation fault, by providing a crafted ELF file.

Recommendations For GNU Binutils version 2.30, consider disabling the bfd get debug link info 1 function as a temporary workaround until a patch is available. Restrict access to the opncls.c library to minimize the risk of exploitation. Avoid using the strnlen function in the affected bfd get debug link info 1 function until the issue is resolved.