CVE-2018-20671

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer…

published January 4, 2019

CVSS
—
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01973 · 80.3th percentile
Published
2019-01-04T16:00Z
EPSS history
Timeline
  • 04 JAN 16:00Z
    load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer…
    cvelistv5