PT-2017-17646 · Gnu+2 · Gnu Binutils+2
Marcel Böhme
+1
·
Publicado
2017-03-29
·
Atualizado
2024-06-15
·
CVE-2017-7300
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.28
Description
The issue is related to a heap-based buffer over-read in the Binary File Descriptor (BFD) library, specifically in the aout link add symbols function. This occurs due to an incomplete check for invalid string offsets while loading symbols, which can lead to a crash of the GNU linker (ld) program.
Recommendations
For GNU Binutils version 2.28, consider updating to a newer version that includes a fix for this issue, as the current version is affected by the heap-based buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Suse
Ubuntu