CVE-2017-12456: High severity GNU binutils vulnerability
Last updated 24 July 2024
Other sources
The readsymbolstabsdebugginginfo function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is CVE-2017-12456?
CVE-2017-12456 is a vulnerability in the read_symbol_stabs_debugging_info function in GNU Binutils 2.29 and earlier, which allows remote attackers to cause an out-of-bounds heap read via a crafted binary file.
How can this vulnerability be exploited?
This vulnerability can be exploited by sending a specially crafted binary file to the target system, which will trigger an out-of-bounds heap read.
What is the severity of CVE-2017-12456?
The severity of CVE-2017-12456 is high.
Which software versions are affected by CVE-2017-12456?
GNU Binutils versions 2.29 and earlier are affected by CVE-2017-12456.
How can I fix CVE-2017-12456?
To fix CVE-2017-12456, update to GNU Binutils version 2.29.1 or later.