Fixed
Created: Dec 19, 2018
Updated: Feb 25, 2019
Resolved Date: Feb 20, 2019
Found In Version: 9.0.0.19
Fix Version: 9.0.0.20
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.
https://nvd.nist.gov/vuln/detail/CVE-2018-20002
