CVEvulnerability

CVE-2018-19932

5.5 MEDIUM Published 2018-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-190

Description

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.

Affected configurations

• gnu binutils (<= 2.31) • netapp vasa provider (>= 7.2)

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References