Bug 2043408

Summary:	bintutils: heap overflow in libbfd.c
Product:	[Other] Security Response	Reporter:	Dhananjay Arunesh <darunesh>
Component:	vulnerability	Assignee:	Nobody <nobody>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	ailan, aoliva, bdettelb, caswilli, dhalasz, dvlasenk, elima, erik-fedora, fjansen, fweimer, jakub, jburrell, jwong, kaycoth, klember, ktietz, manisandro, marcandre.lureau, mcermak, micjohns, mpolacek, mprchlik, nickc, ohudlick, rjones, sipoyare, sthirugn, virt-maint, vkrizan, vmugicag
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2043409, 2043410, 2072464, 2072465, 2072466, 2072467, 2072468
Bug Blocks:	2043401

Description Dhananjay Arunesh 2022-01-21 08:15:38 UTC

An off-by-one error in the check to make sure that the buffer
containing the auxiliary symbol data was not overrun, which leads the adversary can both read and write the system memory and cause a denial of service.

References:
https://sourceware.org/bugzilla/show_bug.cgi?id=26240

Comment 1 Dhananjay Arunesh 2022-01-21 08:17:29 UTC

Created binutils tracking bugs for this issue:

Affects: fedora-all [bug 2043409]


Created mingw-binutils tracking bugs for this issue:

Affects: fedora-all [bug 2043410]

Comment 2 Sandro Mani 2022-01-28 18:10:08 UTC

Fix: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=4fd8d5856435ff84de1f181381fc51754285af6f