CVE-2017-13757: Medium severity binutils vulnerability
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elfi386getsyntheticsymtab in elf32-i386.c and elfx8664getsyntheticsymtab in elf64-x86-64.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-13757?
CVE-2017-13757 has been categorized with a severity rating that indicates a denial of service risk due to heap-based buffer over-read.
How do I fix CVE-2017-13757?
To fix CVE-2017-13757, it is recommended to upgrade GNU Binutils to a version later than 2.29 that addresses this vulnerability.
What type of attacks can exploit CVE-2017-13757?
CVE-2017-13757 can be exploited by remote attackers using crafted ELF files to cause application crashes.
Which software versions are affected by CVE-2017-13757?
CVE-2017-13757 specifically affects GNU Binutils version 2.29.
Can CVE-2017-13757 lead to data loss?
While CVE-2017-13757 may result in application crashes, it typically manifests as a denial of service rather than direct data loss.