Wind River Support Network

HomeDefectsLIN10-2772
Fixed

LIN10-2772 : Security Advisory - binutils - CVE-2017-17124

Created: Dec 14, 2017    Updated: Dec 3, 2018
Resolved Date: Jun 5, 2018
Found In Version: 10.17.41.1
Fix Version: 10.17.41.8
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Userspace

Description

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

https://nvd.nist.gov/vuln/detail/CVE-2017-17124

Other Downloads


CVEs


Live chat
Online