PT-2017-17648

CVE-2017-7302

·

Published

2017-03-29

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28
Description The Binary File Descriptor library has a function in bfd/aoutx.h that is prone to an invalid read due to missing checks for unrecognized relocs, causing utilities like strip to crash.
Recommendations For GNU Binutils version 2.28, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2017-7302
MGASA-2019-0169
OPENSUSE-SU-2018_3223-1
OPENSUSE-SU-2024:10651-1
SUSE-SU-2017:3170-1
SUSE-SU-2018:3207-1
SUSE-SU-2018:3207-2
USN-4336-2
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com