Missing Release of Resource after Effective Lifetime The advisory has been revoked - it doesn't affect any version of package binutils (opens in a new tab)

Threat Intelligence

1.82% (78^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU2004-BINUTILS-649196
published10 Dec 2018
disclosed10 Dec 2018

Report a new vulnerability Found a mistake?

Introduced: 10 Dec 2018

CVE-2018-20002 (opens in a new tab) CWE-772 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:20.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream binutils package and not the binutils package as distributed by Ubuntu.

The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.