PT-2018-3924
CVE-2018-12697
·
Published
2018-04-11
·
Updated
2021-07-21
Description by
CVSS 2.0
7.8
HighMetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.30
Description
The issue is related to a NULL pointer dereference error in the
work stuff copy to from function of the cplus-dem.c component. This error can be exploited by a remote attacker to cause a denial of service. The vulnerability can occur during the execution of objdump.Recommendations
For GNU Binutils version 2.30, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the NULL pointer dereference error in the
work stuff copy to from function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾