CVE-2018-20651

A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…

published January 1, 2019

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02247 · 82.8th percentile
Published
2019-01-01T16:00Z
EPSS history
Timeline
  • 01 JAN 16:00Z
    A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed…
    cvelistv5