SB2018041305 - Denial of service in GNU Binutils

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Heap-based buffer overflow (CVE-ID: CVE-2018-12699)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to heap-based buffer overflow in the finish_stab function, as defined in the stabs.c source code file. A local attacker can execute the objdump command, trigger memory corruption and cause the service to crash.

2) Resource exhaustion (CVE-ID: CVE-2018-12698)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to resource exhaustion in the demangle_template component, as defined in the cplus-dem.c source code file in the GNU libiberty library, when the component processes a Create an array for saving the template argument values XNEWVEC call. A local attacker can execute the objdump command, consume an excessive amount of memory and cause the service to crash.

3) Null pointer dereference (CVE-ID: CVE-2018-12697)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to NULL pointer dereference in the work_stuff_copy_to_from function, as defined in the cplus-dem.csource code file in the GNU libiberty library. A local attacker can execute the objdump command, trigger NULL pointer dereference condition and cause the service to crash.

4) Resource exhaustion (CVE-ID: CVE-2018-12700)

The vulnerability allows a local attacker to cause DoS condition on the target system.

The vulnerability exists due to DEBUG_KIND_INDIRECT infinite recursion condition. A local attacker can execute the objdump command, trigger stack exhaustion condition in the debug_write_type function, as defined in debug.c source code file and cause the service to crash.

Remediation

Install update from vendor's website.

References

• https://sourceware.org/bugzilla/show_bug.cgi?id=23057