PT-2017-4286 · Gnu+1 · Gnu Binutils+1
Adhokshaj Mishra
·
Publicado
2017-08-25
·
Atualizado
2026-04-20
·
CVE-2017-13716
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.29
Description:
The issue is related to the C++ symbol demangler routine in cplus-dem.c, which allows remote attackers to cause a denial of service through excessive memory allocation and application crash via a crafted file. This can be triggered by a call from the Binary File Descriptor (BFD) library. The vulnerability is associated with unlimited memory allocation.
Recommendations:
For GNU Binutils version 2.29, consider updating to a newer version to mitigate the risk of excessive memory allocation and application crash. As a temporary workaround, restrict the use of crafted files that could trigger the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Allocation of Resources Without Limits
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Debian
Gnu Binutils