Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2018-6759

Опубликовано: 06 фев. 2018
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

2.30-15ubuntu1
cosmic

not-affected

2.31.1-6ubuntu1
devel

not-affected

2.31.1-6ubuntu1
disco

not-affected

2.31.1-6ubuntu1
eoan

not-affected

2.31.1-6ubuntu1
esm-infra-legacy/trusty

needed

esm-infra/bionic

not-affected

2.30-15ubuntu1
esm-infra/focal

not-affected

2.31.1-6ubuntu1
esm-infra/xenial

released

2.26.1-1ubuntu1~16.04.8+esm1

Показывать по

EPSS

Процентиль: 46%
0.00237
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
redhat
около 8 лет назад

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.

CVSS3: 5.5
nvd
около 8 лет назад

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.

CVSS3: 5.5
debian
около 8 лет назад

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File ...

CVSS3: 5.5
github
больше 3 лет назад

The bfd_get_debug_link_info_1 function in opncls.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, has an unchecked strnlen operation. Remote attackers could leverage this vulnerability to cause a denial of service (segmentation fault) via a crafted ELF file.

CVSS3: 5.5
fstec
больше 7 лет назад

Уязвимость функции bfd_get_debug_link_info_1 программного средства разработки GNU Binutils, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 46%
0.00237
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3