CVE-2018-10373

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a…

published April 25, 2018

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by nm-new.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03282 · 88.4th percentile
Published
2018-04-25T09:00Z
EPSS history
Timeline
  • 25 APR 09:00Z
    concat_filename in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a…
    cvelistv5