View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-17360 severity low: SUSE including 360 source package names (0.23.1-12.3:binutils-2.32-7.5.1, 0.3.2-1.2:binutils-2.32-7.5.1, …), 766 product×package rows across 318 product lines (Container bci/bci-sle15-kernel-module-devel, Container bci/gcc, … (318 product lines)): Fixed 535, Known Affected 231.
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. a heap-based buffer over-read in bfd_getl32 in libbfd.c allows an attacker to cause a denial of service through a crafted PE file. This vulnerability can be triggered by the executable objdump.