Medium severity5.5OSV Advisory· Published Jul 1, 2018· Updated Jun 17, 2026
CVE-2018-13033
CVE-2018-13033
Description
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted ELF file, as demonstrated by _bfd_elf_parse_attributes in elf-attrs.c and bfd_malloc in libbfd.c. This can occur during execution of nm.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- sourceware.org/bugzilla/show_bug.cginvdExploitIssue TrackingPatchThird Party Advisory
- www.securityfocus.com/bid/104584nvdThird Party AdvisoryVDB Entry
- access.redhat.com/errata/RHBA-2019:0327nvdThird Party Advisory
- access.redhat.com/errata/RHSA-2018:3032nvdThird Party Advisory
- security.gentoo.org/glsa/201908-01nvd
- usn.ubuntu.com/4336-1/nvd
News mentions
0No linked articles in our index yet.