Wind River Support Network

HomeDefectsLIN8-6427
Fixed

LIN8-6427 : Security Advisory - binutils - CVE-2017-7299

Created: Apr 12, 2017    Updated: Dec 3, 2018
Resolved Date: Jul 28, 2017
Found In Version: 8.0.0.16
Fix Version: 8.0.0.20
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7299

Other Downloads


CVEs


Live chat
Online