PT-2017-17647

CVE-2017-7301

·

Published

2017-03-29

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28
Description The Binary File Descriptor library has an off-by-one vulnerability in the aout link add symbols function due to insufficient string offset checking. This issue could cause the GNU linker program to crash.
Recommendations For GNU Binutils version 2.28, consider updating to a newer version that addresses this issue, as the current version may cause the GNU linker program to crash due to the off-by-one vulnerability in the aout link add symbols function.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
MGASA-2019-0169
OPENSUSE-SU-2018_3223-1
OPENSUSE-SU-2024:10651-1
SUSE-SU-2017:3170-1
SUSE-SU-2018:3207-1
SUSE-SU-2018:3207-2
USN-4336-2
Found an issue in the description? Have something to add? Feel free to write us 👾