Wind River Support Network

HomeDefectsLIN6-12812
Fixed

LIN6-12812 : Security Advisory - binutils - CVE-2017-7299

Created: Apr 12, 2017    Updated: Dec 3, 2018
Resolved Date: Sep 24, 2017
Found In Version: 6.0.0.33
Fix Version: 6.0.0.35
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace

Description

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7299

Other Downloads


Live chat
Online