CVE-2017-8392

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28

Description The Binary File Descriptor library is prone to an invalid read of size 8 due to a missing check for NULL symbols in the bfd dwarf2 find nearest line function. This issue causes programs that analyze binary programs using the library, such as objdump, to crash.

Recommendations For GNU Binutils version 2.28, consider applying a patch that adds a check to determine whether symbols are NULL in the bfd dwarf2 find nearest line function to prevent the invalid read.