{"id":"CVE-2018-20651","aliases":["BELL-CVE-2018-20651","DEBIAN-CVE-2018-20651","EUVD-2018-13202","GHSA-w8vj-984w-6pcp","SUSE-SU-2019:2650-1","SUSE-SU-2019:2779-1","SUSE-SU-2019:2780-1","UBUNTU-CVE-2018-20651","USN-4336-1","openSUSE-SU-2019:2415-1","openSUSE-SU-2019:2432-1","openSUSE-SU-2024:10651-1"],"status":"published","title":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the...","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02247,"percentile":0.83,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2019-01-01T16:00:00Z","modified":"2026-10-24T10:30:34Z","fixes":[{"ecosystem":"Debian:12","package":"binutils","fixed_in":["2.32.51.20190707-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"binutils","fixed_in":["2.32.51.20190707-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"binutils","fixed_in":["2.32.51.20190707-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"binutils","fixed_in":["2.30-21ubuntu1~18.04.3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.51.20190707-1"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 5","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-9.33.1"}]}],"bundled":17},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-7.5.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-7.5.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-7.5.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-6.8.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-6.8.1"}]}],"bundled":28},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-6.8.1"}]}],"bundled":28},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.3"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.30-21ubuntu1~18.04.3"}]}],"versions":["2.29.1-4ubuntu1","2.29.1-6ubuntu1","2.29.1-7ubuntu1","2.29.1-8ubuntu1","2.29.1-10ubuntu1","2.29.1-12ubuntu1","2.30-4ubuntu1","2.30-5ubuntu1","2.30-7ubuntu1","2.30-8ubuntu1","2.30-9ubuntu1","2.30-10ubuntu1","2.30-11ubuntu1","2.30-14ubuntu2","2.30-15ubuntu1","2.30-20ubuntu2~18.04","2.30-21ubuntu1~18.04","2.30-21ubuntu1~18.04.1","2.30-21ubuntu1~18.04.2"],"bundled":44},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp150.10.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-aarch64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-arm-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-avr-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-epiphany-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-hppa-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-hppa64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-i386-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-ia64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-m68k-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-mips-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-ppc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-ppc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-ppc64le-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-riscv64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-rx-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-s390-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-s390x-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-sparc-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-sparc64-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"cross-spu-binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32-lp151.3.3.1"}]}],"bundled":28},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"binutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-1.3"}]}],"bundled":106}],"products":[{"vendor":"gnu","product":"binutils"}],"references":[{"url":"http://www.securityfocus.com/bid/106440","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=24041","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.f5.com/csp/article/K38336243","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201908-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://usn.ubuntu.com/4336-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20651"},{"url":"https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=54025d5812ff100f5f0654eb7e1ffd50f2e37f5f"},{"url":"https://github.com/advisories/GHSA-w8vj-984w-6pcp"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2018-20651","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-20651","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192650-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1109412","tags":["report"]},{"url":"https://bugzilla.suse.com/1109413","tags":["report"]},{"url":"https://bugzilla.suse.com/1109414","tags":["report"]},{"url":"https://bugzilla.suse.com/1111996","tags":["report"]},{"url":"https://bugzilla.suse.com/1112534","tags":["report"]},{"url":"https://bugzilla.suse.com/1112535","tags":["report"]},{"url":"https://bugzilla.suse.com/1113247","tags":["report"]},{"url":"https://bugzilla.suse.com/1113252","tags":["report"]},{"url":"https://bugzilla.suse.com/1113255","tags":["report"]},{"url":"https://bugzilla.suse.com/1116827","tags":["report"]},{"url":"https://bugzilla.suse.com/1118830","tags":["report"]},{"url":"https://bugzilla.suse.com/1118831","tags":["report"]},{"url":"https://bugzilla.suse.com/1120640","tags":["report"]},{"url":"https://bugzilla.suse.com/1121034","tags":["report"]},{"url":"https://bugzilla.suse.com/1121035","tags":["report"]},{"url":"https://bugzilla.suse.com/1121056","tags":["report"]},{"url":"https://bugzilla.suse.com/1133131","tags":["report"]},{"url":"https://bugzilla.suse.com/1133232","tags":["report"]},{"url":"https://bugzilla.suse.com/1141913","tags":["report"]},{"url":"https://bugzilla.suse.com/1142772","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000876","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17985","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18483","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18484","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18605","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18606","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-18607","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19931","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-19932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20623","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20651","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20671","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-1010180","tags":["web"]},{"url":"https://bugzilla.suse.com/ECO-368","tags":["report"]},{"url":"https://bugzilla.suse.com/SLE-6206","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192779-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1118644","tags":["report"]},{"url":"https://bugzilla.suse.com/1152590","tags":["report"]},{"url":"https://bugzilla.suse.com/1154016","tags":["report"]},{"url":"https://bugzilla.suse.com/1154025","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6759","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6872","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7568","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7642","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7643","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-8945","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20192780-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-20651","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4336-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-20651","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-8945","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-9138","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10372","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10534","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-10535","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12641","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12697","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12698","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12699","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-12934","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-13033","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17360","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17794","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-17985","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18483","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18484","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18605","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18606","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18607","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18700","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-18701","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19931","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-19932","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20002","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20623","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-20671","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-1000876","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9070","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9071","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9073","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9074","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9075","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-9077","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-12972","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14250","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-14444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17450","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2019-17451","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/Z3JUZNUB5MLFYPANGJ7Z7AR432VRY6KN/#Z3JUZNUB5MLFYPANGJ7Z7AR432VRY6KN","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SWUEZJ7AYL2LKLBXPYPMQQS6C42W3MB6/#SWUEZJ7AYL2LKLBXPYPMQQS6C42W3MB6","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-9939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12452","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12453","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12799","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-13757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14128","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14129","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14333","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14529","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14729","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14745","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-14974","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15938","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15939","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16826","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16828","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16829","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16830","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16831","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-16832","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6965","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6966","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-6969","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7223","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7224","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7225","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7226","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7300","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7301","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7302","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7303","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7304","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8394","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8421","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9746","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9747","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9748","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-9756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10534","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10535","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12972","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14250","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17450","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9074","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9075","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9077","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16590","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16591","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16592","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16593","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-16599","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35493","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35496","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-35507","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-3487","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-20651","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:00:00Z","modified":"2024-08-05T12:05:17.829Z","updated_at":"2026-11-02T14:34:59.872731Z"}],"euvd":[{"id":"EUVD-2018-13202","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:00:00Z","modified":"2024-08-05T12:05:17Z","updated_at":"2026-11-03T02:39:30.323824Z"}],"ghsa":[{"id":"GHSA-w8vj-984w-6pcp","title":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the...","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2022-05-14T00:55:07Z","modified":"2023-02-02T05:02:41Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:51:29.873049Z"}],"nvd":[{"id":"CVE-2018-20651","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:29:00.343Z","modified":"2026-06-17T01:53:16.14Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:04:52.056758Z"}],"osv":[{"id":"BELL-CVE-2018-20651","title":"CVE-2018-20651 does not affect BellSoft software","status":"withdrawn","published":"2019-01-01T16:29:00Z","modified":"2026-01-26T09:48:00.420748Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:14.701973Z"},{"id":"CVE-2018-20651","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:29:00.343Z","modified":"2026-10-24T10:30:34.176629465Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:09.145458Z"},{"id":"DEBIAN-CVE-2018-20651","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:29:00.343Z","modified":"2026-10-23T18:03:05.289055443Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:30.57382Z"},{"id":"UBUNTU-CVE-2018-20651","description":"A NULL pointer dereference was discovered in elf_link_add_object_symbols in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31.1. This occurs for a crafted ET_DYN with no program headers. A specially crafted ELF file allows remote attackers to cause a denial of service, as demonstrated by ld.","status":"published","published":"2019-01-01T16:29:00Z","modified":"2026-04-22T11:53:07.150375Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"openSUSE-SU-2019:2415-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch [jsc#ECO-368].\n\nIncludes following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO build issues (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).\n- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.  \n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Fix broken debug symbols (bsc#1118644)\n- Handle ELF compressed header alignment correctly.\n\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-10-30T17:25:53Z","modified":"2026-02-04T03:05:23.612391Z","updated_at":"2026-11-02T16:58:30.784344Z"},{"id":"openSUSE-SU-2019:2432-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch [jsc#ECO-368].\n\nIncludes following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO build issues (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).\n- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.  \n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Fix broken debug symbols (bsc#1118644)\n- Handle ELF compressed header alignment correctly.\n\n\nThis update was imported from the SUSE:SLE-15-SP1:Update update project.","status":"published","published":"2019-11-05T15:30:18Z","modified":"2026-02-04T04:06:56.482283Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10651-1","title":"binutils-2.37-1.3 on GA media","description":"These are all security issues fixed in the binutils-2.37-1.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:21:04.564666Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2019:2650-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch @7b468db3 [jsc#ECO-368]:\n\nIncludes the following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- Enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO problems (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.\n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Handle ELF compressed header alignment correctly.\n\n  ","status":"published","published":"2019-10-14T08:53:28Z","modified":"2026-02-04T03:43:03.821299Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2779-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch [jsc#ECO-368].\n\nIncludes following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO build issues (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).\n- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.  \n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Fix broken debug symbols (bsc#1118644)\n- Handle ELF compressed header alignment correctly.\n\n","status":"published","published":"2019-10-24T14:57:52Z","modified":"2026-02-04T02:19:25.340033Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"SUSE-SU-2019:2780-1","title":"Security update for binutils","description":"This update for binutils fixes the following issues:\n\nbinutils was updated to current 2.32 branch [jsc#ECO-368].\n\nIncludes following security fixes:\n\n- CVE-2018-17358: Fixed invalid memory access in _bfd_stab_section_find_nearest_line in syms.c (bsc#1109412)\n- CVE-2018-17359: Fixed invalid memory access exists in bfd_zalloc in opncls.c (bsc#1109413)\n- CVE-2018-17360: Fixed heap-based buffer over-read in bfd_getl32 in libbfd.c (bsc#1109414)\n- CVE-2018-17985: Fixed a stack consumption problem caused by the cplus_demangle_type (bsc#1116827)\n- CVE-2018-18309: Fixed an invalid memory address dereference was discovered in read_reloc in reloc.c (bsc#1111996)\n- CVE-2018-18483: Fixed get_count function provided by libiberty that allowed attackers to cause a denial of service or other unspecified impact (bsc#1112535)\n- CVE-2018-18484: Fixed stack exhaustion in the C++ demangling functions provided by libiberty, caused by recursive stack frames (bsc#1112534)\n- CVE-2018-18605: Fixed a heap-based buffer over-read issue was discovered in the function sec_merge_hash_lookup causing a denial of service (bsc#1113255)\n- CVE-2018-18606: Fixed a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments, causing denial of service (bsc#1113252)\n- CVE-2018-18607: Fixed a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section, causing denial of service (bsc#1113247)\n- CVE-2018-19931: Fixed a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h (bsc#1118831)\n- CVE-2018-19932: Fixed an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA (bsc#1118830)\n- CVE-2018-20623: Fixed a use-after-free in the error function in elfcomm.c (bsc#1121035)\n- CVE-2018-20651: Fixed a denial of service via a NULL pointer dereference in elf_link_add_object_symbols in elflink.c (bsc#1121034)\n- CVE-2018-20671: Fixed an integer overflow that can trigger a heap-based buffer overflow in  load_specific_debug_section in objdump.c (bsc#1121056)\n- CVE-2018-1000876: Fixed integer overflow in bfd_get_dynamic_reloc_upper_bound,bfd_canonicalize_dynamic_reloc in objdump (bsc#1120640)\n- CVE-2019-1010180: Fixed an out of bound memory access that could lead to crashes (bsc#1142772)\n\n- enable xtensa architecture (Tensilica lc6 and related)\n- Use -ffat-lto-objects in order to provide assembly for static libs\n  (bsc#1141913).\n- Fixed some LTO build issues (bsc#1133131 bsc#1133232).\n- riscv: Don't check ABI flags if no code section\n- Fixed a segfault in ld when building some versions of pacemaker (bsc#1154025, bsc#1154016).\n- Add avr, epiphany and rx to target_list so that the common binutils can handle all objects we can create with crosses (bsc#1152590).\n\nUpdate to binutils 2.32:\n\n* The binutils now support for the C-SKY processor series.\n* The x86 assembler now supports a -mvexwig=[0|1] option to control\n  encoding of VEX.W-ignored (WIG) VEX instructions.\n  It also has a new -mx86-used-note=[yes|no] option to generate (or\n  not) x86 GNU property notes.  \n* The MIPS assembler now supports the Loongson EXTensions R2 (EXT2),\n  the Loongson EXTensions (EXT) instructions, the Loongson Content\n  Address Memory (CAM) ASE and the Loongson MultiMedia extensions\n  Instructions (MMI) ASE.\n* The addr2line, c++filt, nm and objdump tools now have a default\n  limit on the maximum amount of recursion that is allowed whilst\n  demangling strings.  This limit can be disabled if necessary.\n* Objdump's --disassemble option can now take a parameter,\n  specifying the starting symbol for disassembly.  Disassembly will\n  continue from this symbol up to the next symbol or the end of the\n  function.\n* The BFD linker will now report property change in linker map file\n  when merging GNU properties.\n* The BFD linker's -t option now doesn't report members within\n  archives, unless -t is given twice.  This makes it more useful\n  when generating a list of files that should be packaged for a\n  linker bug report.\n* The GOLD linker has improved warning messages for relocations that\n  refer to discarded sections.\n\n- Improve relro support on s390 [fate#326356]\n- Fix broken debug symbols (bsc#1118644)\n- Handle ELF compressed header alignment correctly.\n\n","status":"published","published":"2019-10-25T12:25:52Z","modified":"2026-02-04T04:13:25.87103Z","updated_at":"2026-11-02T15:53:47.06185Z"},{"id":"USN-4336-1","title":"binutils vulnerabilities","description":"It was discovered that GNU binutils contained a large number of security\nissues. If a user or automated system were tricked into processing a\nspecially-crafted file, a remote attacker could cause GNU binutils to\ncrash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2020-04-22T11:40:31Z","modified":"2026-04-27T15:48:42.817786021Z","updated_at":"2026-11-02T16:58:14.547547Z"}]}}