CVE-2019-14444

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32

Description The issue is related to an integer overflow in the apply relocations function of the readelf.c component in GNU Binutils. This allows a remote attacker to cause a denial of service using a specially crafted ELF file. The exploitation can trigger a write access violation in the byte put little endian function in elfcomm.c.

Recommendations For GNU Binutils version 2.32, consider updating to a newer version that contains a fix for this issue. As a temporary workaround, restrict the use of the apply relocations function in readelf.c to minimize the risk of exploitation. Avoid using specially crafted ELF files that could trigger the integer overflow in the byte put little endian function in elfcomm.c.