PT-2017-4277 · Gnu+2 · Gnu Binutils+2

Ned Williamson

·

Publicado

2017-07-26

·

Atualizado

2021-07-21

·

CVE-2017-12455

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: GNU Binutils versions 2.29 and earlier
Description: The issue is related to the evax bfd print emh function in the vms-alpha.c component of the Binary File Descriptor (BFD) library, which allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file. This can lead to unauthorized access to confidential data, disruption of data integrity, and denial of service.
Recommendations: For GNU Binutils versions 2.29 and earlier, consider updating to a newer version to mitigate the risk, as the evax bfd print emh function in the vms-alpha.c component is vulnerable to out of bounds heap read attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2018-1603
ALT-PU-2018-1832
ALT-PU-2019-1184
BDU:2023-07732
CVE-2017-12455
MGASA-2019-0169
USN-4336-2

Produtos afetados

Alt Linux
Gnu Binutils
Ubuntu