Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2018-7208
HistoryFeb 18, 2018 - 4:29 a.m.

CVE-2018-7208

2018-02-1804:29:00
Alpine Linux Development Team
security.alpinelinux.org
12

0.009 Low

EPSS

Percentile

82.3%

In the coff_pointerize_aux function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, an index is not validated, which allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via a crafted file, as demonstrated by objcopy of a COFF object.

OSVersionArchitecturePackageVersionFilename
Alpine3.7-mainnoarchbinutils< 2.30-r2UNKNOWN
Alpine3.8-mainnoarchbinutils< 2.30-r6UNKNOWN