GNU Binutils is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the affected application, resulting in denial-of-service conditions. Due to the nature of this issue, arbitrary code execution may be possible but this has not been confirmed.
GNU Binutils 2.28 is vulnerable; other versions may also be affected.
Information
Exploit
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
References:
- binutils Homepage (binutils)
- Bug 21670 - A stack buffer overflow in the nm tool of the GNU Binutils. (sourceware)