Bug 1658949 (CVE-2018-19932) - CVE-2018-19932 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service
Summary: CVE-2018-19932 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macr...
Keywords:
Status: CLOSED ERRATA
Alias: CVE-2018-19932
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1659618 1659619 1659620 1659621 1659622
Blocks: 1658951
TreeView+ depends on / blocked
 
Reported: 2018-12-13 08:54 UTC by Andrej Nemec
Modified: 2025-02-07 13:28 UTC (History)
13 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-10-27 03:22:12 UTC
Embargoed:

Attachments (Terms of Use)

Description Andrej Nemec 2018-12-13 08:54:43 UTC 
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.

Upstream issue:

https://sourceware.org/bugzilla/show_bug.cgi?id=23932

Upstream patch:

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=beab453223769279cc1cef68a1622ab8978641f7
Comment 1 Scott Gayou 2018-12-14 19:48:35 UTC 
Reproduces quite easily -- infinite loop printing an assertion in all versions of RHEL packages post rhel-5. binutils 220 in rhel-5 does not appear to package strip, hence is notaffected.

```
mingw-strip: BFD (GNU Binutils) 2.30 assertion fail ../../bfd/elf.c:7089
mingw-strip: BFD (GNU Binutils) 2.30 assertion fail ../../bfd/elf.c:7089
mingw-strip: BFD (GNU Binutils) 2.30 assertion fail ../../bfd/elf.c:7089
mingw-strip: BFD (GNU Binutils) 2.30 assertion fail ../../bfd/elf.c:7089
mingw-strip: BFD (GNU Binutils) 2.30 assertion fail ../../bfd/elf.c:7089
```
Note You need to log in before you can comment on or make changes to this bug.