GNU Binutils is prone to a denial-of-service vulnerability.
Attackers can exploit this issue to crash the application and cause denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
GNU Binutils 2.29 is vulnerable; other versions may also be affected.
Information
Exploit
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
References:
- binutils Homepage (binutils)
- binutils: heap-based buffer overflow in read_1_byte (dwarf2.c) (Agostino Sarubbo)
- Bug 22169 - heap-based buffer overflow in read_1_byte (dwarf2.c) (sourceware.org)
- PR22169, heap-based buffer overflow in read_1_byte (sourceware.org)