CVE-2018-7208

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not…

published February 18, 2018

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02214 · 82.4th percentile
Published
2018-02-18T04:00Z
EPSS history
Timeline
  • 18 FEB 04:00Z
    In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not…
    cvelistv5