PT-2017-18315

CVE-2017-8394

·

Published

2017-05-01

·

Updated

2024-06-15

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.28
Description The Binary File Descriptor library is prone to an invalid read of size 4 due to NULL pointer dereferencing of bfd elf large com section. This issue causes programs that analyze binary programs using the libbfd library, such as objcopy, to crash.
Recommendations For GNU Binutils version 2.28, consider updating to a newer version to resolve the issue, as the current version is affected by the NULL pointer dereferencing vulnerability in the bfd elf large com section function.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
MGASA-2019-0169
OPENSUSE-SU-2018_3223-1
OPENSUSE-SU-2024:10651-1
SUSE-SU-2017:3170-1
SUSE-SU-2018:3207-1
SUSE-SU-2018:3207-2
USN-4336-2
Found an issue in the description? Have something to add? Feel free to write us 👾