PT-2017-4308 · Gnu+1 · Gnu Binutils+1
Publicado
2017-09-22
·
Atualizado
2021-07-21
·
CVE-2017-15025
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.29
Description:
The issue is related to the
decode line info function in the dwarf2.c component of the Binary File Descriptor (BFD) library, also known as libbfd. It allows remote attackers to cause a denial of service, resulting in a divide-by-zero error and application crash, via a crafted ELF file. The vulnerability is due to the lack of a check for division by zero.Recommendations:
For GNU Binutils version 2.29, consider updating to a newer version that contains a fix for this issue, as the current version is affected by the divide-by-zero error in the
decode line info function.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Ubuntu