CVE-2018-18606 vulnerability in GNU and Other Products
Published on October 23, 2018
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Products Associated with CVE-2018-18606
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-18606 are published in these products:
Exploit Probability
EPSS
0.68%
Percentile
71.24%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.