CVE-2018-12699 PUBLISHED

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.

EPSS 0.50% · 66.0th percentile

Risk Scores

EPSS Score
0.50%
66.0th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSbinutils0, 2.30-21ubuntu1~18.04.2, 2.30-21ubuntu1~18.04.1
Ubuntu:Pro:16.04:LTSbinutils2.26-8ubuntu2, 2.25.51.20151028-0ubuntu1, 2.25.51.20151106-0ubuntu1
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu14.2+esm3, 2.24-5ubuntu14.2+esm5, 2.24-5ubuntu14.2+esm6

Timeline

References

Open in Interactive Console →