PT-2017-18315
CVE-2017-8394
·
Published
2017-05-01
·
Updated
2024-06-15
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GNU Binutils version 2.28
Description
The Binary File Descriptor library is prone to an invalid read of size 4 due to NULL pointer dereferencing of
bfd elf large com section. This issue causes programs that analyze binary programs using the libbfd library, such as objcopy, to crash.Recommendations
For GNU Binutils version 2.28, consider updating to a newer version to resolve the issue, as the current version is affected by the NULL pointer dereferencing vulnerability in the
bfd elf large com section function. Found an issue in the description? Have something to add? Feel free to write us 👾