CVE-2017-7300

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The issue is related to a heap-based buffer over-read in the Binary File Descriptor (BFD) library, specifically in the aout link add symbols function. This occurs due to an incomplete check for invalid string offsets while loading symbols, which can lead to a crash of the GNU linker (ld) program.

Recommendations For GNU Binutils version 2.28, consider updating to a newer version that includes a fix for this issue, as the current version is affected by the heap-based buffer over-read. At the moment, there is no information about a newer version that contains a fix for this vulnerability.