Back to search
CVE-2017-15023
Published: Oct 4, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
101611
vdb-entry
x_refsource_BID
GLSA-201801-01
vendor-advisory
x_refsource_GENTOO
https://sourceware.org/bugzilla/show_bug.cgi?id=22200
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now