ALPINE-CVE-2018-19932

See a problem?
Please try reporting it to the source first.
Source
https://security.alpinelinux.org/vuln/CVE-2018-19932
Import Source
https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json
JSON Data
https://api.osv.dev/v1/vulns/ALPINE-CVE-2018-19932
Upstream
Published
2018-12-07T07:29:00Z
Modified
2026-06-09T21:31:29Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA macro in elf.c.

References

Affected packages

Alpine:v3.10
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.11
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.12
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.13
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.14
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.15
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.16
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.17
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.18
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.19
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.20
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.21
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.22
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.23
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"
Alpine:v3.24
binutils

Package

Name
binutils
Purl
pkg:apk/alpine/binutils?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.32-r0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-19932.json"