Security Advisory

CVE-2017-7302

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-03-29 15:00:00
Last updated 2024-08-05 15:56:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.