Critical Vulnerability in Binutils: NULL Pointer Dereference in ELF Processing
Summary
UBUNTU-CVE-2018-18607: An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. Affects binutils versions 2.23.52.20130913-0ubuntu1 – 2.24-5ubuntu3.1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Binutils is a collection of binary tools essential for managing binary files, object files, and executable files in Unix-like operating systems. It includes tools such as 'as' (the assembler), 'ld' (the linker), and 'objdump' (for displaying information from object files). The package is widely used for compiling and linking programs, making it a critical component for developers and system administrators. The vulnerability in question affects the Binary File Descriptor (BFD) library within Binutils, specifically in the handling of ELF (Executable and Linkable Format) files.
Vulnerability Detail
An issue was discovered in the elf_link_input_bfd function in elflink.c of the Binary File Descriptor (BFD) library, as distributed in GNU Binutils version 2.31. This vulnerability arises from a NULL pointer dereference when the function attempts to find STT_TLS symbols without any TLS section present. This flaw can be exploited by remote attackers to cause a denial of service, potentially leading to application crashes. The vulnerability is classified with a CVSS score of 5.5, indicating a moderate severity level.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can avoid processing ELF files that may be crafted to exploit this vulnerability. Additionally, ensuring that the application does not handle untrusted ELF files can mitigate the risk until the package is updated.
Conclusion
The vulnerability in Binutils poses a significant risk due to its potential to cause denial of service through a NULL pointer dereference. Users are advised to update their packages to the latest version to mitigate this risk. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for binutils →
FAQ
The vulnerability is a NULL pointer dereference in the elf_link_input_bfd function, which can lead to denial of service.
The vulnerability affects Binutils versions prior to the patched version 2.30-21ubuntu1~18.04.3.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. Visit Vulert Scanner to check your application without any signup.
As a workaround, avoid processing untrusted ELF files and ensure your application does not handle potentially malicious inputs.
The CVSS score for this vulnerability is 5.5, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for binutils.
