CVE-2017-12454: High severity binutils vulnerability
Published Aug 4, 2017
·Updated
Last updated 24 July 2024
Other sources
The bfdvmsslurpegsd function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an arbitrary memory read via a crafted vms alpha file.
Affected Software
2 affected componentsFixes available
GNU binutils<=2.29
debian/binutils
2.35.2-22.40-22.44-3
Remediation
Patch Available
Event History
Aug 4, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:27 PM
Description
Sep 20, 2024
Data Sourced
via Ubuntu·01:19 AM
RemedyDescriptionSeverityAffected Software
Feb 23, 2025
Data Sourced
via Debian·03:33 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-12454?
CVE-2017-12454 is a vulnerability in the Binary File Descriptor (BFD) library that allows remote attackers to cause an arbitrary memory read.
2
How does CVE-2017-12454 affect the BFD library?
CVE-2017-12454 affects the _bfd_vms_slurp_egsd function in the bfd/vms-alpha.c file of the BFD library.
3
What software versions are affected by CVE-2017-12454?
Versions 2.29 and earlier of GNU Binutils are affected by CVE-2017-12454.
4
Which operating systems are affected by CVE-2017-12454?
Ubuntu and Debian operating systems are affected by CVE-2017-12454.
5
How can I fix the CVE-2017-12454 vulnerability?
Upgrade to version 2.29.1 or later for Ubuntu or version 2.31.1 or later for Debian.