CVE-2018-17358

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.31. An invalid memory access exists in _bfd_stab_section_find_nearest_line in syms.c. Attackers could leverage this vulnerability to cause a denial of service (application crash) via a crafted ELF file.

• CWE-119

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
• https://seclists.org/bugtraq/2020/Jan/25
• https://sourceware.org/bugzilla/show_bug.cgi?id=23686Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4336-1/
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
• https://seclists.org/bugtraq/2020/Jan/25
• https://sourceware.org/bugzilla/show_bug.cgi?id=23686Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4336-1/

Published

Sep 23, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-17334An issue was discovered in libsvg2 through 2012-10-19. A sta…
• CVE-2018-17336UDisks 2.8.0 has a format string vulnerability in udisks_log…
• CVE-2018-17337Intelbras NPLUG 1.0.0.14 devices have XSS via a crafted SSID…
• CVE-2018-17338An issue has been found in pdfalto through 0.2. It is a heap…
• CVE-2018-1734IBM Rational Collaborative Lifecycle Management 6.0 through …4.3
• CVE-2018-17341BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite r…
• CVE-2018-17359An issue was discovered in the Binary File Descriptor (BFD) …
• CVE-2018-1736IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 could allow a re…7.4
• CVE-2018-17360An issue was discovered in the Binary File Descriptor (BFD) …
• CVE-2018-17361Multiple XSS vulnerabilities in WeaselCMS v0.3.6 allow remot…
• CVE-2018-17364OTCMS 3.61 allows remote attackers to execute arbitrary PHP …
• CVE-2018-17365SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitr…7.5