PT-2017-4280 · Gnu+2 · Gnu Binutils+2
Ned Williamson
·
Publicado
2017-07-26
·
Atualizado
2021-07-21
·
CVE-2017-12458
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils versions 2.29 and earlier
Description:
The issue is related to the
nlm swap auxiliary headers in function in the bfd/nlmcode.h component of the Binary File Descriptor (BFD) library. It allows remote attackers to cause an out of bounds heap read via a crafted nlm file, potentially leading to unauthorized access to confidential data, disruption of data integrity, and denial of service.Recommendations:
For GNU Binutils versions 2.29 and earlier, consider updating to a newer version to mitigate the risk, as the current version allows for remote attackers to exploit the
nlm swap auxiliary headers in function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Binutils
Ubuntu