CVE-2017-14333: Integer Overflow
Last updated 24 July 2024
Other sources
The processversionsections function in readelf.c in GNU Binutils 2.29 allows attackers to cause a denial of service (Integer Overflow, and hang because of a time-consuming loop) or possibly have unspecified other impact via a crafted binary file with invalid values of ent.vnnext, during "readelf -a" execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-14333?
CVE-2017-14333 is a vulnerability in GNU Binutils 2.29 that allows attackers to cause a denial of service or have other unspecified impacts via a crafted binary file.
How does CVE-2017-14333 affect the affected software?
CVE-2017-14333 affects GNU Binutils 2.29, specifically the process_version_sections function in readelf.c.
What is the severity of CVE-2017-14333?
The severity of CVE-2017-14333 is not specified.
How can I fix CVE-2017-14333?
To fix CVE-2017-14333, update the affected software to version 2.29.1 or later.
Where can I find more information about CVE-2017-14333?
More information about CVE-2017-14333 can be found at the following references: [1](https://sourceware.org/bugzilla/show_bug.cgi?id=21990), [2](https://security.gentoo.org/glsa/201801-01), [3](https://launchpad.net/bugs/cve/CVE-2017-14333).