CVE-2017-12453: High severity binutils vulnerability
Last updated 24 July 2024
Other sources
The bfdvmsslurpeeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this exploit?
The vulnerability ID for this exploit is CVE-2017-12453.
What is the severity of CVE-2017-12453?
The severity of CVE-2017-12453 is not specified in the provided information.
Which software is affected by CVE-2017-12453?
The affected software is the Binary File Descriptor (BFD) library, specifically GNU Binutils 2.29 and earlier versions.
How can remote attackers exploit CVE-2017-12453?
Remote attackers can exploit CVE-2017-12453 by causing an out of bounds heap read through a crafted vms alpha file.
Are there any known fixes for CVE-2017-12453?
Yes, there are known fixes for CVE-2017-12453. For example, Ubuntu has released a fixed version 2.29.1 and Debian has released fixed versions 2.31.1-16, 2.35.2-2, 2.40-2, and 2.41-5 of the Binutils package.