CVE-2017-12457: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The bfdmakesectionwithflags function in section.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a NULL dereference via a crafted file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-12457?
CVE-2017-12457 is a vulnerability in the Binary File Descriptor (BFD) library, allowing remote attackers to cause a NULL dereference.
What software is affected by CVE-2017-12457?
The affected software includes GNU Binutils 2.29 and earlier, as well as specific versions of binutils packages in Ubuntu and Debian.
How can CVE-2017-12457 be exploited?
CVE-2017-12457 can be exploited by a remote attacker through a crafted file to cause a NULL dereference.
What is the severity of CVE-2017-12457?
The severity of CVE-2017-12457 is not specified in the provided information.
How do I fix CVE-2017-12457?
To fix CVE-2017-12457, you should update the affected software to the specified fixed versions or apply the recommended patches.