Beveiligingsadvies

CVE-2017-17080

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-11-30 21:00:00
Laatst bijgewerkt 2024-08-05 20:43:59
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate sizes of core notes, which allows remote attackers to cause a denial of service (bfd_getl32 heap-based buffer over-read and application crash) via a crafted object file, related to elfcore_grok_netbsd_procinfo, elfcore_grok_openbsd_procinfo, and elfcore_grok_nto_status.