GNU Binutils 2.31
Approved changes feed: RSS · Atom
cpe:2.3:a:gnu:binutils:2.31:*:*:*:*:*:*:*
part: a version: 2.31 update: *
| Vendor | Gnu (575dd98a-a14a-5d9e-a2eb-97d38d86fcb9) |
|---|---|
| Product | Binutils (bdfd61c2-da72-5ce9-819e-45ee45378259) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/binutils |
purl2cpe | 2026-06-01 10:11:54.199051 |
pkg:deb/ubuntu/binutils |
purl2cpe | 2026-06-01 10:11:54.199053 |
pkg:github/bminor/binutils-gdb |
purl2cpe | 2026-06-01 10:11:54.199054 |
pkg:redox-os/redox-os/binutils-gdb |
purl2cpe | 2026-06-01 10:11:54.199055 |
pkg:rpm/fedora/binutils |
purl2cpe | 2026-06-01 10:11:54.199057 |
pkg:rpm/opensuse/binutils |
purl2cpe | 2026-06-01 10:11:54.199058 |
pkg:sourceware/binutils-gdb |
purl2cpe | 2026-06-01 10:11:54.199059 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-20002 |
vulnerable | 2026-06-08 05:11:26.506936 |
Details available
The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a denial of service (memory consumption), as demonstrated by nm.
Published: 2018-12-10T02:00:00.000Z
Updated: 2024-08-05T11:51:18.234Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18701 |
vulnerable | 2026-06-08 05:11:14.511705 |
Details available
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
Published: 2018-10-27T16:00:00.000Z
Updated: 2024-08-05T11:16:00.391Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18700 |
vulnerable | 2026-06-08 05:11:14.511362 |
Details available
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
Published: 2018-10-27T16:00:00.000Z
Updated: 2024-08-05T11:16:00.418Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18607 |
vulnerable | 2026-06-08 05:11:14.359292 |
Details available
An issue was discovered in elf_link_input_bfd in elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in elf_link_input_bfd when used for finding STT_TLS symbols without any TLS section. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Published: 2018-10-23T17:00:00.000Z
Updated: 2024-08-05T11:16:00.320Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18606 |
vulnerable | 2026-06-08 05:11:14.358523 |
Details available
An issue was discovered in the merge_strings function in merge.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. There is a NULL pointer dereference in _bfd_add_merge_section when attempting to merge sections with large alignments. A specially crafted ELF allows remote attackers to cause a denial of service, as demonstrated by ld.
Published: 2018-10-23T17:00:00.000Z
Updated: 2024-08-05T11:15:59.847Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18605 |
vulnerable | 2026-06-08 05:11:14.355419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18484 |
vulnerable | 2026-06-08 05:11:14.123231 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18483 |
vulnerable | 2026-06-08 05:11:14.122591 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18309 |
vulnerable | 2026-06-08 05:11:07.412192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17985 |
vulnerable | 2026-06-08 05:11:07.082992 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-17794 |
vulnerable | 2026-06-08 05:11:06.726280 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.