PT-2017-18664 · Gnu+2 · Gnu Binutils+2

Publicado 2017-05-18 · Atualizado 2021-07-21 · CVE-2017-9041

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, by providing a crafted ELF file. This is related to the mishandling of MIPS GOT in the process mips specific function in readelf.c.

Recommendations For GNU Binutils version 2.28, consider updating to a newer version that addresses this issue, as the current version is affected by the denial of service vulnerability related to the process mips specific function in readelf.c.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2017-9041

MGASA-2019-0169

SUSE-SU-2017:3170-1

USN-4336-2

Produtos afetados

Gnu Binutils

Suse

Ubuntu

Referências · 620

• https://suse.com/security/cve/CVE-2017-9756 · Nota
• https://ubuntu.com/security/CVE-2016-4492 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9744 · Nota de Segurança
• https://ubuntu.com/security/CVE-2016-4487 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2018-17360 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-00670 · Nota de Segurança
• https://sourceware.org/bugzilla/show_bug.cgi?id=24227 · Nota
• https://suse.com/security/cve/CVE-2017-12454 · Nota
• https://ubuntu.com/security/CVE-2017-14130 · Aviso do Fabricante
• https://bugzilla.suse.com/1030589 · Nota
• https://ubuntu.com/security/CVE-2017-9748 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-9043 · Nota
• https://bugzilla.suse.com/1031656 · Nota
• https://sourceware.org/bugzilla/show_bug.cgi?id=23806 · Nota
• https://ubuntu.com/security/CVE-2018-17985 · Aviso do Fabricante