PT-2017-4309 · Gnu+1 · Gnu Binutils+1

Publicado

2017-09-26

·

Atualizado

2021-07-21

·

CVE-2017-15225

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: GNU Binutils version 2.29
Description: The issue is related to a memory leak caused by the bfd dwarf2 cleanup debug info function in the dwarf2.c component of the Binary File Descriptor (BFD) library, also known as libbfd. This allows remote attackers to cause a denial of service via a crafted ELF file. The vulnerability is associated with the non-release of resources after their expiration, which can be exploited by an attacker to disrupt service.
Recommendations: For GNU Binutils version 2.29, consider updating to a newer version that contains a fix for this issue, as the current version is affected by a memory leak in the bfd dwarf2 cleanup debug info function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Missing Release of Resource after Effective Lifetime

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-772

Identificadores relacionados

BDU:2023-07764
CVE-2017-15225
USN-4336-2

Produtos afetados

Gnu Binutils
Ubuntu