PT-2017-17645 · Gnu+2 · Gnu Binutils+2
Marcel Böhme
·
Publicado
2017-03-29
·
Atualizado
2024-06-15
·
CVE-2017-7299
CVSS v3.1
5.5
Média
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.28
Description
The issue arises from an invalid read in the Binary File Descriptor (BFD) library, which is part of GNU Binutils. This occurs because the code responsible for emitting relocs does not verify the format of the input file before attempting to read the ELF reloc section header. As a result, the GNU linker (ld) program may crash.
Recommendations
For GNU Binutils version 2.28, consider updating to a newer version that addresses this issue, as the current version may lead to a program crash due to the invalid read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Suse
Ubuntu