PT-2017-4310 · Gnu+2 · Gnu Binutils+2
Publicado
2017-09-26
·
Atualizado
2024-06-15
·
CVE-2017-15938
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.29
Description:
The issue is related to a buffer overflow in the dwarf2.c component of GNU Binutils, allowing a remote attacker to cause a denial of service. This can result in an invalid memory read, segmentation fault, and application crash due to the miscalculation of DW FORM ref addr die refs in the case of a relocatable object file.
Recommendations:
For GNU Binutils version 2.29, consider updating to a newer version that addresses this issue, as the current version allows remote attackers to cause a denial of service.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Suse
Ubuntu