Wind River Support Network

HomeDefectsLIN9-6032
Fixed

LIN9-6032 : Security Advisory - binutils - CVE-2017-17124

Created: Dec 14, 2017    Updated: Dec 3, 2018
Resolved Date: Dec 25, 2017
Found In Version: 9.0.0.13
Fix Version: 9.0.0.14
Severity: Standard
Applicable for: Wind River Linux 9
Component/s: Userspace

Description

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

https://nvd.nist.gov/vuln/detail/CVE-2017-17124

Other Downloads


CVEs


Live chat
Online