CVEs-PoC/2018/CVE-2018-12699.md

CVE-2018-12699

Description

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write of 8 bytes. This can occur during execution of objdump.

POC

Reference

• https://usn.ubuntu.com/4336-1/

Github

• https://github.com/KorayAgaya/TrivyWeb
• https://github.com/Mohzeela/external-secret
• https://github.com/RUB-SysSec/redqueen
• https://github.com/akaganeite/CVE4PP
• https://github.com/colonelmeow/appsecctf
• https://github.com/fokypoky/places-list
• https://github.com/jrak1204/overstock_test
• https://github.com/siddharthraopotukuchi/trivy
• https://github.com/simiyo/trivy
• https://github.com/t31m0/Vulnerability-Scanner-for-Containers
• https://github.com/umahari/security