PT-2017-19312 · Gnu+1 · Gnu Binutils+1

Owl337 · Publicado 2017-06-26 · Atualizado 2019-10-03 · CVE-2017-9955

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted file. This occurs when a certain size field is larger than a corresponding data field, as demonstrated by mishandling within the objdump program.

Recommendations For GNU Binutils version 2.28, consider updating to a newer version that contains a fix for this issue, as the current version is affected.

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2017-9955

MGASA-2019-0169

SUSE-SU-2017:3170-1

Produtos afetados

Gnu Binutils

Suse

Referências · 172

• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=ld/NEWS;hb=refs/tags/binutils-2_32 · Nota
• https://suse.com/security/cve/CVE-2017-9756 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9955 · Nota de Segurança
• https://bugzilla.suse.com/1037072 · Nota
• https://suse.com/security/cve/CVE-2017-7227 · Nota
• https://bugzilla.suse.com/1057144 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18987 · Nota
• https://bugzilla.suse.com/1052507 · Nota
• https://suse.com/security/cve/CVE-2017-12454 · Nota
• https://suse.com/security/cve/CVE-2017-8393 · Nota
• https://cve.org/CVERecord?id=CVE-2017-9955 · Nota de Segurança
• https://bugzilla.suse.com/1030589 · Nota
• https://bugzilla.suse.com/1057149 · Nota
• https://suse.com/security/cve/CVE-2017-9043 · Nota
• https://bugzilla.suse.com/1031656 · Nota