PT-2017-4312 · Gnu+2 · Gnu Binutils+2
Publicado
2017-10-31
·
Atualizado
2024-06-15
·
CVE-2017-16826
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.29.1
Description:
The issue is related to a buffer overflow in the
coff slurp line table function of the coffcode.h component in GNU Binutils. This allows a remote attacker to access confidential data, compromise its integrity, and cause a denial of service by using a specially crafted PE file. The exploitation can lead to invalid memory access and application crash.Recommendations:
For GNU Binutils version 2.29.1, consider disabling the
coff slurp line table function as a temporary workaround until a patch is available. Restrict access to the coffcode.h component to minimize the risk of exploitation. Avoid using specially crafted PE files that could trigger the buffer overflow in the coff slurp line table function.Exploit
Correção
DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Gnu Binutils
Suse
Ubuntu