The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug. Upstream bug: https://sourceware.org/bugzilla/show_bug.cgi?id=21581 Upstream patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=62b76e4b6e0b4cb5b3e0053d1de4097b32577049 References:
Created binutils tracking bugs for this issue: Affects: fedora-all [bug 1469613] Created mingw-binutils tracking bugs for this issue: Affects: epel-all [bug 1469614]