CVE-2018-18606

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31

Description The issue is related to a NULL pointer dereference in the bfd add merge section function when attempting to merge sections with large alignments. This can be exploited by remote attackers using a specially crafted ELF file to cause a denial of service.

Recommendations For GNU Binutils version 2.31, consider applying a patch to fix the NULL pointer dereference issue in the bfd add merge section function as a temporary workaround, restrict the use of the merge strings function in merge.c until a patch is available.