CVE-2018-17360

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31

Description An issue in the Binary File Descriptor (BFD) library allows an attacker to cause a denial of service through a crafted PE file. This can be triggered by the executable objdump. The vulnerability is related to a heap-based buffer over-read in the bfd getl32 function in libbfd.c. It enables a remote attacker to disrupt service using a specially crafted file.

Recommendations For GNU Binutils version 2.31, consider updating to a newer version to mitigate the risk, as the current version contains a heap-based buffer over-read vulnerability in the bfd getl32 function. As a temporary workaround, consider restricting the use of the objdump executable until a patch is available.