CVE-2017-12458: High severity binutils vulnerability
Last updated 24 July 2024
Other sources
The nlmswapauxiliaryheadersin function in bfd/nlmcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted nlm file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-12458?
CVE-2017-12458 is a vulnerability in the Binary File Descriptor (BFD) library, also known as libbfd, as distributed in GNU Binutils 2.29 and earlier versions.
How can remote attackers exploit CVE-2017-12458?
Remote attackers can exploit CVE-2017-12458 by causing an out of bounds heap read using a crafted nlm file.
Which software versions are affected by CVE-2017-12458?
CVE-2017-12458 affects GNU Binutils versions 2.29 and earlier.
What is the remedy for CVE-2017-12458?
The remedy for CVE-2017-12458 is to update the affected software to version 2.29.1 or later.
Where can I find more information about CVE-2017-12458?
You can find more information about CVE-2017-12458 in the following references: [link1](https://sourceware.org/bugzilla/show_bug.cgi?id=21840), [link2](https://launchpad.net/bugs/cve/CVE-2017-12458), [link3](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12458).