CVE-2018-18605 vulnerability in GNU and Other Products
Published on October 23, 2018
A heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, because _bfd_add_merge_section mishandles section merges when size is not a multiple of entsize. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Products Associated with CVE-2018-18605
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-18605 are published in these products:
Exploit Probability
EPSS
0.42%
Percentile
61.50%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.