CVE-2017-12456: High severity binutils vulnerability
Published Aug 4, 2017
·Updated
Last updated 24 July 2024
Other sources
The readsymbolstabsdebugginginfo function in rddbg.c in GNU Binutils 2.29 and earlier allows remote attackers to cause an out of bounds heap read via a crafted binary file.
Affected Software
2 affected componentsFixes available
GNU binutils<=2.29
debian/binutils
2.35.2-22.40-22.44-3
Remediation
Patch Available
Event History
Aug 4, 2017
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Jan 11, 2024
Data Sourced
via Launchpad·10:27 PM
Description
Sep 16, 2024
Data Sourced
via Ubuntu·01:18 AM
RemedyDescriptionSeverityAffected Software
Feb 27, 2025
Data Sourced
via Debian·03:35 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2017-12456?
CVE-2017-12456 is a vulnerability in the read_symbol_stabs_debugging_info function in GNU Binutils 2.29 and earlier, which allows remote attackers to cause an out-of-bounds heap read via a crafted binary file.
2
How can this vulnerability be exploited?
This vulnerability can be exploited by sending a specially crafted binary file to the target system, which will trigger an out-of-bounds heap read.
3
What is the severity of CVE-2017-12456?
The severity of CVE-2017-12456 is high.
4
Which software versions are affected by CVE-2017-12456?
GNU Binutils versions 2.29 and earlier are affected by CVE-2017-12456.
5
How can I fix CVE-2017-12456?
To fix CVE-2017-12456, update to GNU Binutils version 2.29.1 or later.