The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 8 because of missing a check to determine whether symbols are NULL in the _bfd_dwarf2_find_nearest_line function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Binutils | Gnu | 2.28 (including) | 2.28 (including) |
| Binutils | Ubuntu | artful | * |
| Binutils | Ubuntu | precise | * |
| Binutils | Ubuntu | trusty | * |
| Binutils | Ubuntu | yakkety | * |
| Binutils | Ubuntu | zesty | * |