The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.
La función setup_group en elf.c en la librería Binary File Descriptor (BFD), también conocida como libbfd, tal y como viene distribuida en GNU Binutils 2.29 permite a los atacantes remotos provocar una denegación de servicio (desreferencia de puntero NULL y fallo de aplicación) mediante una sección de grupo que sea demasiado pequeña.
USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM. It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.
