CVE-2017-14729: Buffer Overflow
The getsyntheticsymtab functions in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, do not ensure a unique PLT entry for a symbol, which allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted ELF file, related to elf32-i386.c and elf64-x86-64.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-14729?
CVE-2017-14729 has been classified with a medium severity due to its potential for denial of service and application crash.
How do I fix CVE-2017-14729?
To fix CVE-2017-14729, upgrade to a later version of GNU Binutils that addresses this vulnerability.
What systems are impacted by CVE-2017-14729?
CVE-2017-14729 affects GNU Binutils version 2.29.
What type of exploitation may occur due to CVE-2017-14729?
Exploitation of CVE-2017-14729 may lead to a heap-based buffer overflow, resulting in application crashes.
Is CVE-2017-14729 a local or remote vulnerability?
CVE-2017-14729 is considered a remote vulnerability as it can be exploited by remote attackers.