cve/2018/CVE-2018-20623.md

CVE-2018-20623

Description

In GNU Binutils 2.31.1, there is a use-after-free in the error function in elfcomm.c when called from the process_archive function in readelf.c via a crafted ELF file.

POC

Reference

No PoCs from references.

Github

• https://github.com/SZU-SE/UAF-Fuzzer-TestSuite
• https://github.com/phonito/phonito-vulnerable-container
• https://github.com/strongcourage/uafbench
• https://github.com/strongcourage/uafuzz
• https://github.com/wcventure/UAF-Fuzzer-TestSuite