CVE-2017-14129: Medium severity GNU binutils vulnerability
Last updated 24 July 2024
Other sources
The readsection function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (parsecompunit heap-based buffer over-read and application crash) via a crafted ELF file.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2017-14129.
What is the affected software?
The affected software is Binutils.
What is the severity of CVE-2017-14129?
The severity of CVE-2017-14129 is moderate.
How can remote attackers exploit CVE-2017-14129?
Remote attackers can exploit CVE-2017-14129 by sending a crafted ELF file, causing a denial of service and application crash.
How can I fix CVE-2017-14129?
To fix CVE-2017-14129, update to at least version 2.29.1 of Binutils.