GNU libiberty CVE-2018-12697 Memory Corruption Vulnerability



GNU libiberty is prone to a memory-corruption vulnerability.

Attackers can exploit this issue to crash the affected application, resulting in denial-of-service conditions. Given the nature of this issue, attackers may also be able to execute arbitrary code, but this has not been confirmed.

Information

Bugtraq ID: 104538
Class: Boundary Condition Error
CVE: CVE-2018-12697

Remote: Yes
Local: No
Published: Jun 23 2018 12:00AM
Updated: Jun 23 2018 12:00AM
Credit: Sergej Schumilo, Cornelius Aschermann, Ruhr-Universität Bochum
Vulnerable: GNU libiberty 0
GNU Binutils 2.30


Not Vulnerable:

Exploit


The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.


Related Posts