CVE-2017-9040

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2017-04-03

Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash. This is related to the process mips specific function in readelf.c, which can be triggered by a crafted ELF file that attempts to allocate a large amount of memory.

Recommendations For GNU Binutils version 2017-04-03, consider restricting the use of the process mips specific function in readelf.c to minimize the risk of exploitation until a patch is available.