CVE-2019-17450

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.32

Description The issue is related to the find abstract instance function in the dwarf2.c component of the BFD library, which is part of GNU Binutils. It allows remote attackers to cause a denial of service by triggering infinite recursion and application crash via a crafted ELF file. This is due to uncontrolled recursion in the find abstract instance function.

Recommendations For GNU Binutils version 2.32, consider avoiding the use of the find abstract instance function in the dwarf2.c component until a patch is available. As a temporary workaround, restrict the processing of crafted ELF files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.