CVE-2018-7569

dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.30, allows remote attackers to cause a denial of service (integer underflow or overflow, and application crash) via an ELF file with a corrupt DWARF FORM block, as demonstrated by nm.

• CWE-190
• CWE-191

• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3032Third Party Advisory
• https://security.gentoo.org/glsa/201811-17Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22895Exploit, Issue Tracking, Patch, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2019-10/msg00072.html
• http://lists.opensuse.org/opensuse-security-announce/2019-11/msg00008.html
• https://access.redhat.com/errata/RHBA-2019:0327Third Party Advisory
• https://access.redhat.com/errata/RHSA-2018:3032Third Party Advisory
• https://security.gentoo.org/glsa/201811-17Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22895Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Feb 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7563An issue was discovered in GLPI through 9.2.1. The applicati…
• CVE-2018-7564Stored XSS exists on Polycom QDX 6000 devices.
• CVE-2018-7565CSRF exists on Polycom QDX 6000 devices.
• CVE-2018-7566The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ…
• CVE-2018-7567In the Admin Package Manager in Open Ticket Request System (…
• CVE-2018-7568The parse_die function in dwarf1.c in the Binary File Descri…
• CVE-2018-7570The assign_file_positions_for_non_load_sections function in …
• CVE-2018-7572Pulse Secure Client 9.0R1 and 5.3RX before 5.3R5, when confi…
• CVE-2018-7573An issue was discovered in FTPShell Client 6.7. A remote FTP…
• CVE-2018-7574Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7575Google TensorFlow 1.7.x and earlier is affected by a Buffer …
• CVE-2018-7576Google TensorFlow 1.6.x and earlier is affected by: Null Poi…