PT-2017-4306 · Gnu · Gnu Binutils

Publicado 2017-09-25 · Atualizado 2019-05-12 · CVE-2017-15023

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29

Description: The issue is related to the read formatted entries function in the dwarf2.c component of the Binary File Descriptor (BFD) library, which does not properly validate the format count. This allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted ELF file. The vulnerability is related to the concat filename function.

Recommendations: For GNU Binutils version 2.29, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict the use of crafted ELF files to minimize the risk of exploitation. Avoid using the read formatted entries function in the dwarf2.c component until a patch is available.

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

BDU:2023-07761

CVE-2017-15023

MGASA-2019-0169

Produtos afetados

Gnu Binutils

Referências · 44

• https://openwall.com/lists/oss-security/2017/09/30/3 · Nota
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=c361faae8d964db951b7100cada4dcdc983df1bf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-15023 · Nota de Segurança
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=blob_plain;f=ld/NEWS;hb=refs/tags/binutils-2_32 · Nota
• https://openwall.com/lists/oss-security/2017/10/04/6 · Nota
• https://sourceware.org/bugzilla/show_bug.cgi?id=22200 · Correção
• https://blogs.gentoo.org/ago/2017/10/03/binutils-null-pointer-dereference-in-concat_filename-dwarf2-c · Correção
• https://bugs.mageia.org/show_bug.cgi?id=18987 · Nota
• https://openwall.com/lists/oss-security/2017/10/04/5 · Nota
• https://security.gentoo.org/glsa/201801-01 · Aviso do Fabricante
• https://openwall.com/lists/oss-security/2017/10/04/4 · Nota
• https://openwall.com/lists/oss-security/2017/10/04/7 · Nota
• https://openwall.com/lists/oss-security/2017/09/30/1 · Nota
• https://openwall.com/lists/oss-security/2017/05/18/7 · Nota
• https://wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81 · Aviso do Fabricante