PT-2017-18666 · Gnu+1 · Gnu Binutils+1

Publicado 2017-05-18 · Atualizado 2019-05-12 · CVE-2017-9043

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-12

Description The issue in readelf.c might allow remote attackers to cause a denial of service, potentially leading to an application crash, or possibly have other unspecified impacts via a crafted ELF file.

Recommendations For GNU Binutils version 2017-04-12, consider updating to a newer version that addresses this issue, as using a crafted ELF file could lead to a denial of service or other unspecified impacts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-9043

MGASA-2019-0169

SUSE-SU-2017:3170-1

Produtos afetados

Gnu Binutils

Suse

Referências · 173

• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=ld/NEWS;hb=refs/tags/binutils-2_32 · Nota
• https://suse.com/security/cve/CVE-2017-9756 · Nota
• https://bugzilla.suse.com/1037072 · Nota
• https://ubuntu.com/security/CVE-2017-9043 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-7227 · Nota
• https://bugzilla.suse.com/1057144 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18987 · Nota
• https://bugzilla.suse.com/1052507 · Nota
• https://suse.com/security/cve/CVE-2017-12454 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-9043 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-8393 · Nota
• https://bugzilla.suse.com/1030589 · Nota
• https://bugzilla.suse.com/1057149 · Nota
• https://suse.com/security/cve/CVE-2017-9043 · Nota
• https://bugzilla.suse.com/1031656 · Nota