The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:3032 advisory.

  - binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when     parsing a crafted COFF file (CVE-2018-7208)

  - binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library     (CVE-2018-7568)

  - binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library     (CVE-2018-7569)

  - binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash     (CVE-2018-7642)

  - binutils: Integer overflow in the display_debug_ranges function resulting in crash (CVE-2018-7643)

  - binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable (CVE-2018-8945)

  - binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via     crafted file (CVE-2018-10372)

  - binutils: NULL pointer dereference in dwarf2.c:concat_filename() allows for denial of service via crafted     file (CVE-2018-10373)

  - binutils: out of bounds memory write in peXXigen.c files (CVE-2018-10534)

  - binutils: NULL pointer dereference in elf.c (CVE-2018-10535)

  - binutils: Uncontrolled Resource Consumption in execution of nm (CVE-2018-13033)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : binutils (RHSA-2018:3032)

high Nessus Plugin ID 118514

Version 1.8

Version 1.7

Version 1.8 Jul 26, 2024, 8:52 AM Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202407260852
Version 1.7 Apr 28, 2024, 1:01 AM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404280101