PT-2017-4292 · Gnu+2 · Gnu Binutils+2
Mạnh
·
Publicado
2017-08-22
·
Atualizado
2024-06-15
·
CVE-2017-14333
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.29
Description:
The issue is related to an integer overflow in the process version sections function, which can cause a denial of service, leading to a hang due to a time-consuming loop. This can be triggered by a crafted binary file with invalid values of
ent.vn next when executing "readelf -a". The vulnerability may also have unspecified other impacts.Recommendations:
For GNU Binutils version 2.29, consider avoiding the use of the
process version sections function until a patch is available. As a temporary workaround, restrict the execution of "readelf -a" with untrusted binary files to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Suse
Ubuntu