PT-2017-19159 · Gnu+1 · Gnu Binutils+1
Alexandre Adamski
·
Publicado
2017-06-19
·
Atualizado
2021-07-21
·
CVE-2017-9752
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.28
Description
The issue allows remote attackers to cause a denial of service, resulting in a buffer overflow and application crash, or possibly have other unspecified impacts. This occurs via a crafted binary file, which is mishandled by the
bfd vms get value and bfd vms slurp etir functions during the execution of "objdump -D".Recommendations
For GNU Binutils version 2.28, consider updating to a newer version to mitigate the risk of exploitation. As a temporary workaround, restrict the use of the
objdump -D command with untrusted binary files until a patch is available. Avoid using the bfd vms get value and bfd vms slurp etir functions with crafted binary files to minimize the risk of exploitation.Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Ubuntu