Every CVE Search/ Get API key

CVE-2018-13033

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...

5.5 MediumFix available

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.06%Down 0.9 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
CVE-2018-13033
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
CVE-2018-13033
Updated
2026-11-02
EUVDEUVD-2018-4983 No score

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
EUVD-2018-4983
Updated
2026-11-03
GitHub AdvisoriesGHSA-pxx5-469h-xj5h 5.5

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30,...

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
GHSA-pxx5-469h-xj5h
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSV 5.5

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
CVE-2018-13033
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-13033 5.5

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
DEBIAN-CVE-2018-13033
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVRHSA-2018:3032 3.3

Red Hat Security Advisory: binutils security, bug fix, and enhancement update

Record
RHSA-2018:3032
CVSS 3.0
3.3 LowCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2018-13033 5.5

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.

Record
UBUNTU-CVE-2018-13033
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2021-1635459139 No score

Fix CVE(s): CVE-2018-6323, CVE-2017-8421, CVE-2017-15024, CVE-2017-15025, CVE-2017-15022, CVE-2017-15020, CVE-2017-15021, CVE-2017-15225, CVE-2018-18483, CVE-2017-15996, CVE-2018-18484, CVE-2017-12799, CVE-2017-16831, CVE-2017-16832, CVE-2018-1000876, CVE-2018-7208, CVE-2019-14250, CVE-2017-12967, CVE-2019-9075, CVE-2017-17080, CVE-2019-9074, CVE-2018-17794, CVE-2017-17125, CVE-2017-17124, CVE-2017-17121, CVE-2017-6969, CVE-2017-17123, CVE-2018-17358, CVE-2017-6965, CVE-2017-6966, CVE-2018-12641, CVE-2018-8945, CVE-2017-7299, CVE-2018-12699, CVE-2018-10372, CVE-2018-10373, CVE-2019-17451, CVE-2019-17450, CVE-2018-18701, CVE-2018-18700, CVE-2017-7210, CVE-2018-20623, CVE-2017-15938, CVE-2017-15939, CVE-2017-9039, CVE-2017-9038, CVE-2017-14940, CVE-2018-17985, CVE-2018-12700, CVE-2017-9742, CVE-2017-9745, CVE-2017-9744, CVE-2017-9747, CVE-2017-7209, CVE-2017-9749, CVE-2017-9748, CVE-2018-9138, CVE-2017-16828, CVE-2017-16827, CVE-2017-16826, CVE-2017-7614, CVE-2018-6759, CVE-2016-4491, CVE-2017-9044, CVE-2017-9746, CVE-2017-9042, CVE-2017-9040, CVE-2017-9041, CVE-2017-9752, CVE-2017-9753, CVE-2017-9750, CVE-2017-9751, CVE-2017-9756, CVE-2016-4493, CVE-2017-9754, CVE-2017-9755, CVE-2016-4492, CVE-2018-19932, CVE-2017-12458, CVE-2017-12459, CVE-2018-18606, CVE-2018-18607, CVE-2018-18605, CVE-2017-12452, CVE-2017-12453, CVE-2017-12450, CVE-2017-12451, CVE-2017-12456, CVE-2016-4490, CVE-2017-12454, CVE-2017-12455, CVE-2019-14444, CVE-2016-2226, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2018-18309, CVE-2017-7223, CVE-2017-12449, CVE-2017-12448, CVE-2016-4488, CVE-2016-4489, CVE-2018-17359, CVE-2016-4487, CVE-2018-20671, CVE-2018-20002, CVE-2017-14128, CVE-2017-14129, CVE-2018-7568, CVE-2018-7569, CVE-2017-7302, CVE-2017-7301, CVE-2017-7300, CVE-2018-12934, CVE-2017-8394, CVE-2018-7643, CVE-2018-7642, CVE-2018-17360, CVE-2019-12972, CVE-2018-13033, CVE-2018-19931, CVE-2018-10534, CVE-2018-10535, CVE-2019-9077, CVE-2019-9071, CVE-2019-9070, CVE-2019-9073, CVE-2017-14333, CVE-2018-12698, CVE-2017-14130, CVE-2018-12697, CVE-2018-6543, CVE-2017-9954, CVE-2017-12457, CVE-2017-14939, CVE-2017-14938, CVE-2017-14932, CVE-2017-14930, CVE-2017-8398, CVE-2017-8393, CVE-2017-8395, CVE-2017-14529, CVE-2017-8397, CVE-2017-8396, CVE-2017-13710, CVE-2016-6131

  • SECURITY UPDATE:
    • CVE-*.patch: backported many upstream patches to fix security issues.
    • CVE-2016-2226, CVE-2016-4487, CVE-2016-4488, CVE-2016-4489, CVE-2016-4490, CVE-2016-4492, CVE-2016-4493, CVE-2016-6131, CVE-2016-4491, CVE-2017-6965, CVE-2017-6966, CVE-2017-6969, CVE-2017-7209, CVE-2017-7210, CVE-2017-7223, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2017-7299, CVE-2017-7300, CVE-2017-7301, CVE-2017-7302, CVE-2017-7614, CVE-2017-8393, CVE-2017-8394, CVE-2017-8395, CVE-2017-8397, CVE-2017-8396, CVE-2017-8398, CVE-2017-8421, CVE-2017-9038, CVE-2017-9039, CVE-2017-9040, CVE-2017-9042, CVE-2017-9041, CVE-2017-9044, CVE-2017-9742, CVE-2017-9744, CVE-2017-9752, CVE-2017-9745, CVE-2017-9746, CVE-2017-9747, CVE-2017-9748, CVE-2017-9749, CVE-2017-9750, CVE-2017-9751, CVE-2017-9753, CVE-2017-9754, CVE-2017-9755, CVE-2017-9756, CVE-2017-9954, CVE-2017-12448, CVE-2017-12449, CVE-2017-12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459, CVE-2017-12450, CVE-2017-12452, CVE-2017-12453, CVE-2017-12454, CVE-2017-12456, CVE-2017-14333, CVE-2017-12451, CVE-2017-12799, CVE-2017-12967, CVE-2017-13710, CVE-2017-14128, CVE-2017-14129, CVE-2017-14130, CVE-2017-14529, CVE-2017-14930, CVE-2017-14932, CVE-2017-14938, CVE-2017-14939, CVE-2017-14940, CVE-2017-15020, CVE-2017-15021, CVE-2017-15022, CVE-2017-15024, CVE-2017-15025, CVE-2017-15225, CVE-2017-15938, CVE-2017-15939, CVE-2017-15996, CVE-2017-16826, CVE-2017-16827, CVE-2017-16828, CVE-2017-16831, CVE-2017-16832, CVE-2017-17080, CVE-2017-17121, CVE-2017-17123, CVE-2017-17124, CVE-2018-6323, CVE-2018-6543, CVE-2018-6759, CVE-2018-7208, CVE-2018-7568, CVE-2018-7569, CVE-2018-7642, CVE-2018-7643, CVE-2018-8945, CVE-2018-13033, CVE-2018-9138, CVE-2018-12641, CVE-2018-12697, CVE-2018-12698, CVE-2018-12699, CVE-2018-12700, CVE-2018-17794, CVE-2018-17985, CVE-2018-18484, CVE-2018-18700, CVE-2018-18701, CVE-2018-10372, CVE-2018-10373, CVE-2018-10534, CVE-2018-10535, CVE-2018-12934, CVE-2018-18483, CVE-2018-17358, CVE-2018-17359, CVE-2018-17360, CVE-2018-18309, CVE-2018-18605, CVE-2018-18606, CVE-2018-18607, CVE-2018-19931, CVE-2018-19932, CVE-2018-20002, CVE-2018-20623, CVE-2018-20671, CVE-2018-1000876, CVE-2017-17125, CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077, CVE-2019-9070, CVE-2019-9071, CVE-2019-12972, CVE-2019-14250, CVE-2019-14444, CVE-2019-17450, CVE-2019-17451
Record
CLSA-2021-1635459139
Updated
2026-11-02
OSVCLSA-2021-1639670584 No score

Fixed 36 CVEs in binutils

  • CVE-2018-6323: Fix unsigned integer overflow
  • CVE-2018-19931: Fix heap-based buffer overflow in bfd_elf32_swap_phdr_in
  • CVE-2018-6543: Fix integer overflow
  • CVE-2018-20671: Fix integer overflow vulnerability
  • CVE-2018-6759: Fix segmentation fault
  • CVE-2018-7208: Fix segmentation fault
  • CVE-2018-7568: Fix integer overflow
  • CVE-2018-7569: Fix integer underflow or overflow
  • CVE-2018-7642: Fix aout_32_swap_std_reloc_out NULL pointer dereference
  • CVE-2018-7643: Fix integer overflow
  • CVE-2018-8945: Fix segmentation fault
  • CVE-2018-13033: Fix excessive memory allocation
  • CVE-2018-10373: Fix NULL pointer dereference
  • CVE-2018-10535: Fix NULL pointer dereference
  • CVE-2018-18309: Fix invalid memory address dereference
  • CVE-2018-18605: Fix mishandles section merges
  • CVE-2018-18606: Fix NULL pointer dereference
  • CVE-2018-18607: Fix NULL pointer dereference in elf_link_input_bfd
  • CVE-2018-19932: Fix integer overflow and infinite loop
  • CVE-2018-20002: Fix memory consumption
  • CVE-2018-20623: Fix use-after-free in the error function
  • CVE-2018-1000876: Fix integer overflow trigger heap overflow
  • CVE-2019-9073: Fix excessive memory allocation
  • CVE-2019-9075: Fix heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap
  • CVE-2019-9077: Fix heap-based buffer overflow in process_mips_specific
  • CVE-2019-12972: Fix heap-based buffer over-read in _bfd_doprnt
  • CVE-2019-14444: Fix integer overflow
  • CVE-2019-17450: Fix infinite recursion
  • CVE-2016-2226: Fix integer overflow in the string_appends function in cplus-dem.c
  • CVE-2016-4487: Fix use-after-free vulnerability in libiberty
  • CVE-2016-4488: Fix use-after-free vulnerability in libiberty
  • CVE-2016-4489: Fix integer overflow in libiberty
  • CVE-2016-4490: Fix integer overflow in cp-demangle.c in libiberty
  • CVE-2016-4492: Fix buffer overflow in the do_type function in cplus-dem.c in libiberty
  • CVE-2016-4493: Fix out-of-bounds read in demangle_template_value_parm and do_hpacc_template_literal
  • CVE-2016-6131: Fix infinite loop, stack overflow
Record
CLSA-2021-1639670584
Updated
2026-11-02
OSVCLSA-2021-1640621287 No score

Fix of 36 CVEs

  • CVE-2018-6323: Fix unsigned integer overflow
  • CVE-2018-19931: Fix heap-based buffer overflow in bfd_elf32_swap_phdr_in
  • CVE-2018-6543: Fix integer overflow
  • CVE-2018-20671: Fix integer overflow vulnerability
  • CVE-2018-6759: Fix segmentation fault
  • CVE-2018-7208: Fix segmentation fault
  • CVE-2018-7568: Fix integer overflow
  • CVE-2018-7569: Fix integer underflow or overflow
  • CVE-2018-7642: Fix aout_32_swap_std_reloc_out NULL pointer dereference
  • CVE-2018-7643: Fix integer overflow
  • CVE-2018-8945: Fix segmentation fault
  • CVE-2018-13033: Fix excessive memory allocation
  • CVE-2018-10373: Fix NULL pointer dereference
  • CVE-2018-10535: Fix NULL pointer dereference
  • CVE-2018-18309: Fix invalid memory address dereference
  • CVE-2018-18605: Fix mishandles section merges
  • CVE-2018-18606: Fix NULL pointer dereference
  • CVE-2018-18607: Fix NULL pointer dereference in elf_link_input_bfd
  • CVE-2018-19932: Fix integer overflow and infinite loop
  • CVE-2018-20002: Fix memory consumption
  • CVE-2018-20623: Fix use-after-free in the error function
  • CVE-2018-1000876: Fix integer overflow trigger heap overflow
  • CVE-2019-9073: Fix excessive memory allocation
  • CVE-2019-9075: Fix heap-based buffer overflow in _bfd_archive_64_bit_slurp_armap
  • CVE-2019-9077: Fix heap-based buffer overflow in process_mips_specific
  • CVE-2019-12972: Fix heap-based buffer over-read in _bfd_doprnt
  • CVE-2019-14444: Fix integer overflow
  • CVE-2019-17450: Fix infinite recursion
  • CVE-2016-2226: Fix integer overflow in the string_appends function in cplus-dem.c
  • CVE-2016-4487: Fix use-after-free vulnerability in libiberty
  • CVE-2016-4488: Fix use-after-free vulnerability in libiberty
  • CVE-2016-4489: Fix integer overflow in libiberty
  • CVE-2016-4490: Fix integer overflow in cp-demangle.c in libiberty
  • CVE-2016-4492: Fix buffer overflow in the do_type function in cplus-dem.c in libiberty
  • CVE-2016-4493: Fix out-of-bounds read in demangle_template_value_parm and do_hpacc_template_literal
  • CVE-2016-6131: Fix infinite loop, stack overflow
Record
CLSA-2021-1640621287
Updated
2026-11-02
OSVUSN-4336-1 No score

binutils vulnerabilities

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4336-1
Updated
2026-11-02
OSVUSN-4336-2 No score

binutils vulnerabilities

USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4336-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
binutils
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-aarch64-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-alpha-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabi
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabihf
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-dev
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-doc
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa64-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-m68k-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
Show 38 moreShow less
Affected packages
PackageAffectedFixed
binutils-mips-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64-linux-gnuabi64
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64el-linux-gnuabi64
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mipsel-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch-dev
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnuspe
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64le-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-s390x-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sh4-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-source
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sparc64-linux-gnu
TuxCare:Ubuntu:16.04
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils
TuxCare:OracleLinux:6
From an advisory covering 36 CVEs
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els3
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els3
binutils-devel
TuxCare:OracleLinux:6
From an advisory covering 36 CVEs
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els3
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els3
binutils
TuxCare:CentOS:6
From an advisory covering 36 CVEs
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els3
1:2.20.51.0.2-5.48.1.el6.tuxcare.els3
binutils-devel
TuxCare:CentOS:6
From an advisory covering 36 CVEs
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els3
1:2.20.51.0.2-5.48.1.el6.tuxcare.els3
binutils
Debian:12
 before 2.30.90.20180627-1
2.30.90.20180627-1
binutils
Debian:13
 before 2.30.90.20180627-1
2.30.90.20180627-1
binutils
Debian:14
 before 2.30.90.20180627-1
2.30.90.20180627-1
binutils
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-devel
Red Hat:enterprise_linux:7::client
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-debuginfo
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-devel
Red Hat:enterprise_linux:7::computenode
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-devel
Red Hat:enterprise_linux:7::server
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils-devel
Red Hat:enterprise_linux:7::workstation
From an advisory covering 11 CVEs
 before 0:2.27-34.base.el7
0:2.27-34.base.el7
binutils
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1
Show 20 moreShow less
2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8
 None known
binutils
Ubuntu:Pro:16.04:LTS
 before 2.26.1-1ubuntu1~16.04.8+esm1, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 26 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm1
binutils
Ubuntu:18.04:LTS
 before 2.30-21ubuntu1~18.04.3, plus listed versions
2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1
Show 14 moreShow less
2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.3
binutils
Ubuntu:18.04:LTS
From an advisory covering 44 CVEs
 before 2.30-21ubuntu1~18.04.3, plus listed versions
2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1
Show 14 moreShow less
2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.3
binutils
Ubuntu:Pro:16.04:LTS
From an advisory covering 147 CVEs
 before 2.26.1-1ubuntu1~16.04.8+esm1, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 26 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-13033 is a medium vulnerability (CVSS 5.5) in Gnu Binutils, published July 1, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.06%, the 87th percentile. Fixed in binutils 2.30.90.20180627-1.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 12 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open