Wind River Support Network

HomeDefectsLIN5-22903
Fixed

LIN5-22903 : Security Advisory - binutils - CVE-2017-7299

Created: Apr 12, 2017    Updated: May 29, 2018
Resolved Date: Aug 16, 2017
Found In Version: 5.0.1.39
Fix Version: 5.0.1.41
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7299

Other Downloads


Live chat
Online