CVE Vulnerabilities

CVE-2018-12697

NULL Pointer Dereference

Published: Jun 23, 2018 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Ubuntu
LOW

A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

Name Vendor Start Version End Version
Binutils Gnu 2.30 (including) 2.30 (including)
Red Hat Ansible Tower 3.4 for RHEL 7 RedHat ansible-tower-34/ansible-tower-memcached:1.4.15-28 *
Red Hat Ansible Tower 3.4 for RHEL 7 RedHat ansible-tower-35/ansible-tower-memcached:1.4.15-28 *
Red Hat Ansible Tower 3.4 for RHEL 7 RedHat ansible-tower-37/ansible-tower-memcached-rhel7:1.4.15-28 *
Red Hat Enterprise Linux 7 RedHat binutils-0:2.27-41.base.el7 *
Binutils Ubuntu artful *
Binutils Ubuntu bionic *
Binutils Ubuntu cosmic *
Binutils Ubuntu esm-infra-legacy/trusty *
Binutils Ubuntu esm-infra/bionic *
Binutils Ubuntu esm-infra/xenial *
Binutils Ubuntu precise/esm *
Binutils Ubuntu trusty *
Binutils Ubuntu trusty/esm *
Binutils Ubuntu upstream *
Binutils Ubuntu xenial *
Libiberty Ubuntu artful *
Libiberty Ubuntu bionic *
Libiberty Ubuntu cosmic *
Libiberty Ubuntu disco *
Libiberty Ubuntu esm-infra/bionic *
Libiberty Ubuntu esm-infra/xenial *
Libiberty Ubuntu trusty *
Libiberty Ubuntu upstream *
Libiberty Ubuntu xenial *

Potential Mitigations

References