PT-2017-4275 · Gnu+3 · Gnu Binutils+3

Ned Williamson

·

Publicado

2017-07-21

·

Atualizado

2024-06-15

·

CVE-2017-12453

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier
Description: The issue is related to the bfd vms slurp eeom function in libbfd.c of the Binary File Descriptor (BFD) library, which allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. This can lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.
Recommendations: For GNU Binutils versions 2.29 and earlier, consider updating to a newer version to mitigate the risk, as the current version allows for an out of bounds heap read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1603
ALT-PU-2018-1832
ALT-PU-2019-1184
BDU:2023-07730
CVE-2017-12453
MGASA-2019-0169
OPENSUSE-SU-2024:10651-1
SUSE-SU-2017:3170-1
USN-4336-2

Produtos afetados

Alt Linux
Gnu Binutils
Suse
Ubuntu