CVE-2018-18607 vulnerability in GNU and Other Products
Published on October 23, 2018
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Products Associated with CVE-2018-18607
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2018-18607 are published in these products:
Exploit Probability
EPSS
0.37%
Percentile
58.63%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.