CVE-2018-10372

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30

Description The issue is related to a heap-based buffer over-read and application crash in the process cu tu index function in dwarf.c. This can be exploited by remote attackers using a crafted binary file, leading to a denial of service. The vulnerability is associated with reading beyond the valid boundaries of a data buffer.

Recommendations For GNU Binutils version 2.30, consider updating to a newer version that addresses this issue, as the current version is affected by the buffer over-read vulnerability in the process cu tu index function. As a temporary workaround, consider restricting the use of crafted binary files to minimize the risk of exploitation.