CVE-2017-14930
First published: Sat Sep 30 2017(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| GNU Binutils | =2.29 | |
| debian/binutils | 2.35.2-2 2.40-2 2.43.1-5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://sourceware.org/bugzilla/show_bug.cgi?id=22191
- https://launchpad.net/bugs/cve/CVE-2017-14930
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=a26a013f22a19e2c16729e64f40ef8a7dfcc086e
- https://security-tracker.debian.org/tracker/CVE-2017-14930
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14930
- https://nvd.nist.gov/vuln/detail/CVE-2017-14930
- https://ubuntu.com/security/CVE-2017-14930
Frequently Asked Questions
What is CVE-2017-14930?
CVE-2017-14930 is a vulnerability in the Binary File Descriptor (BFD) library, also known as libbfd, which allows remote attackers to cause a denial of service by consuming excessive memory.
How does the CVE-2017-14930 vulnerability manifest?
The vulnerability manifests as a memory leak in the decode_line_info function in dwarf2.c within the libbfd library.
What software is affected by CVE-2017-14930?
The CVE-2017-14930 vulnerability affects GNU Binutils version 2.29 and possibly other versions.
How can I mitigate the CVE-2017-14930 vulnerability?
To mitigate the vulnerability, you can update the binutils package to version 2.26.1-1ubuntu1~16.04.8+ or higher, or version 2.30 or higher.
Where can I find more information about CVE-2017-14930?
You can find more information about CVE-2017-14930 on the Sourceware Bugzilla, Launchpad, and MITRE CVE websites. (Please note that hyperlinks are not allowed in this format, so you will need to search for the specific websites using the provided descriptions.)
- collector/nvd-index
- agent/type
- agent/last-modified-date
- collector/launchpad-cve
- source/Launchpad
- agent/author
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/severity
- agent/weakness
- collector/usn-cve
- source/Ubuntu
- agent/references
- agent/remedy
- agent/softwarecombine
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/security-tracker-debian
- source/Debian
- vendor/gnu
- canonical/gnu binutils
- version/gnu binutils/2.29
- package-manager/debian