The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parse_comp_unit heap-based buffer over-read and application crash) via a crafted ELF file.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/100624 | |
https://security.gentoo.org/glsa/201801-01 | |
https://sourceware.org/bugzilla/show_bug.cgi?id=22047 | Issue Tracking Patch Third Party Advisory |
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=e4f2723003859dc6b33ca0dadbc4a7659ebf1643 |
Configurations
History
07 Nov 2023, 02:38
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2017-09-04 20:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-14129
Mitre link : CVE-2017-14129
CVE.ORG link : CVE-2017-14129
JSON object : View
Products Affected
gnu
- binutils
CWE
CWE-125
Out-of-bounds Read