PT-2017-4274 · Gnu+3 · Gnu Binutils+3

Ned Williamson

·

Publicado

2017-07-21

·

Atualizado

2024-06-15

·

CVE-2017-12452

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier
Description: The issue is related to the bfd mach o i386 canonicalize one reloc function in the bfd/mach-o-i386.c component of the GNU Binutils, which allows remote attackers to cause an out of bounds heap read via a crafted mach-o file. This can lead to unauthorized access to sensitive data, disruption of data integrity, and denial of service.
Recommendations: For GNU Binutils versions 2.29 and earlier, consider updating to a newer version to mitigate the risk. As a temporary workaround, restrict the use of the bfd mach o i386 canonicalize one reloc function until a patch is available. Avoid processing crafted mach-o files with the affected GNU Binutils versions to minimize the risk of exploitation.

Correção

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1603
ALT-PU-2018-1832
ALT-PU-2019-1184
BDU:2023-07729
CVE-2017-12452
MGASA-2019-0169
OPENSUSE-SU-2024:10651-1
SUSE-SU-2017:3170-1
USN-4336-2

Produtos afetados

Alt Linux
Gnu Binutils
Suse
Ubuntu