suse · CVE-2018-20671

Quick triage

Priority: medium Published: 2021-05-30 14:19:48 UTC Updated: 2026-03-05 06:34:14 UTC

View at Official suse advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2018-20671 severity moderate: SUSE including 364 source package names (0.23.1-12.3:binutils-2.32-7.5.1, 0.3.2-1.2:binutils-2.32-7.5.1, …), 784 product×package rows across 330 product lines (Container bci/bci-sle15-kernel-module-devel, Container bci/gcc, … (330 product lines)): Fixed 535, Known Affected 231, Known Not Affected 18.

Description:

load_specific_debug_section in objdump.c in GNU Binutils through 2.31.1 contains an integer overflow vulnerability that can trigger a heap-based buffer overflow via a crafted section size.

cvelogic Threat Intelligence