CVE-2017-12454: High severity GNU binutils vulnerability
Last updated 24 July 2024
Other sources
The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is CVE-2017-12454?
CVE-2017-12454 is a vulnerability in the Binary File Descriptor (BFD) library that allows remote attackers to cause an arbitrary memory read.
How does CVE-2017-12454 affect the BFD library?
CVE-2017-12454 affects the _bfd_vms_slurp_egsd function in the bfd/vms-alpha.c file of the BFD library.
What software versions are affected by CVE-2017-12454?
Versions 2.29 and earlier of GNU Binutils are affected by CVE-2017-12454.
Which operating systems are affected by CVE-2017-12454?
Ubuntu and Debian operating systems are affected by CVE-2017-12454.
How can I fix the CVE-2017-12454 vulnerability?
Upgrade to version 2.29.1 or later for Ubuntu or version 2.31.1 or later for Debian.