PT-2017-18313 · Gnu+1 · Gnu Binutils+1

Manh-Dung Nguyen · Publicado 2017-05-01 · Atualizado 2024-06-15 · CVE-2017-8392

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The Binary File Descriptor library is prone to an invalid read of size 8 due to a missing check for NULL symbols in the bfd dwarf2 find nearest line function. This issue causes programs that analyze binary programs using the library, such as objdump, to crash.

Recommendations For GNU Binutils version 2.28, consider applying a patch that adds a check to determine whether symbols are NULL in the bfd dwarf2 find nearest line function to prevent the invalid read.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2017-8392

MGASA-2019-0169

OPENSUSE-SU-2018_3223-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2017:3170-1

SUSE-SU-2018:3207-1

SUSE-SU-2018:3207-2

Produtos afetados

Gnu Binutils

Suse

Referências · 362

• https://bugzilla.suse.com/1086788 · Nota
• https://bugzilla.suse.com/1052507 · Nota
• https://suse.com/security/cve/CVE-2017-7210 · Nota
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=gas/NEWS;hb=refs/tags/binutils-2_32 · Nota
• https://bugzilla.suse.com/1068888 · Nota
• https://openwall.com/lists/oss-security/2017/09/30/2 · Nota
• https://bugzilla.suse.com/1086608 · Nota
• https://bugzilla.suse.com/1038881 · Nota
• https://suse.com/security/cve/CVE-2017-12448 · Nota
• https://openwall.com/lists/oss-security/2017/10/27/4 · Nota
• https://bugzilla.suse.com/1031593 · Nota
• https://suse.com/security/cve/CVE-2017-12450 · Nota
• https://bugzilla.suse.com/1061241 · Nota
• https://suse.com/support/update/announcement/2018/suse-su-20183207-2 · Nota
• https://suse.com/security/cve/CVE-2017-8421 · Nota