vulnerability

Oracle Solaris 11: CVE-2018-19931: Vulnerability in GNU binary utilities

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Dec 7, 2018
Added
May 30, 2019
Modified
Feb 17, 2022

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h because the number of program headers is not restricted.

Solutions

oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-32-0-11-4-9-0-1-1-0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.