CVE-2018-20623 PUBLISHED

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.

EPSS 0.32% · 55.2th percentile

Risk Scores

EPSS Score
0.32%
55.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSbinutils2.25.51.20151106-0ubuntu1, 2.25.51.20151113-1ubuntu1, 2.25.51.20151113-2ubuntu1
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu14.2, 2.23.52.20130913-0ubuntu1, 2.23.90.20131017-1ubuntu1
Ubuntu:18.04:LTSbinutils0, 2.29.1-4ubuntu1, 2.29.1-6ubuntu1

Timeline

References

Open in Interactive Console →