PT-2017-18315 · Gnu+2 · Gnu Binutils+2

Manh-Dung Nguyen + 2 · Publicado 2017-05-01 · Atualizado 2024-06-15 · CVE-2017-8394

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The Binary File Descriptor library is prone to an invalid read of size 4 due to NULL pointer dereferencing of bfd elf large com section. This issue causes programs that analyze binary programs using the libbfd library, such as objcopy, to crash.

Recommendations For GNU Binutils version 2.28, consider updating to a newer version to resolve the issue, as the current version is affected by the NULL pointer dereferencing vulnerability in the bfd elf large com section function.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2017-8394

MGASA-2019-0169

OPENSUSE-SU-2018_3223-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2017:3170-1

SUSE-SU-2018:3207-1

SUSE-SU-2018:3207-2

USN-4336-2

Produtos afetados

Gnu Binutils

Suse

Ubuntu

Referências · 773

• https://suse.com/security/cve/CVE-2017-8396.html · Nota
• https://suse.com/security/cve/CVE-2017-9756 · Nota
• https://ubuntu.com/security/CVE-2016-4492 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2018-8945.html · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-4487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-17360 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-16593 · Nota
• https://bdu.fstec.ru/vul/2019-00670 · Nota de Segurança
• https://sourceware.org/bugzilla/show_bug.cgi?id=24227 · Nota
• https://suse.com/security/cve/CVE-2017-12454 · Nota
• https://ubuntu.com/security/CVE-2017-14130 · Aviso do Fabricante
• https://bugzilla.suse.com/1030589 · Nota
• https://ubuntu.com/security/CVE-2017-9748 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-9043 · Nota