CVE-2018-6323
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 5.8%
from disclosure to weapon19 days
Published on NVDJan 26
1st PoC+19d
exploitation probability
5.8%top 8% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
The elf_object_p function in elfcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, has an unsigned integer overflow because bfd_size_type multiplication is not used. A crafted ELF file allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencewww.exploit-db.com/exploits/44035/unverifiedexploitdbwww.exploit-db.com/exploits/44035unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.