find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Binutils | Gnu | 2.32 (including) | 2.32 (including) |
| Red Hat Enterprise Linux 8 | RedHat | binutils-0:2.30-79.el8 | * |
| Red Hat Enterprise Linux 8 | RedHat | binutils-0:2.30-79.el8 | * |
| Binutils | Ubuntu | bionic | * |
| Binutils | Ubuntu | disco | * |
| Binutils | Ubuntu | eoan | * |
| Binutils | Ubuntu | esm-infra-legacy/trusty | * |
| Binutils | Ubuntu | esm-infra/xenial | * |
| Binutils | Ubuntu | precise/esm | * |
| Binutils | Ubuntu | trusty | * |
| Binutils | Ubuntu | trusty/esm | * |
| Binutils | Ubuntu | xenial | * |