CVE-2017-14932: Medium severity GNU binutils vulnerability
decodelineinfo in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-14932?
CVE-2017-14932 is a vulnerability in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.29 that allows remote attackers to cause a denial of service (infinite loop) via a crafted ELF file.
How does CVE-2017-14932 affect the Binutils package on Ubuntu?
CVE-2017-14932 affects the Binutils package on Ubuntu versions 16.04.8 and later, including version 2.29.90.20180122-1.
How does CVE-2017-14932 affect the Binutils package on Debian?
CVE-2017-14932 affects the Binutils package on Debian versions 2.31.1-16, 2.35.2-2, 2.40-2, and 2.41-5.
What is the severity of CVE-2017-14932?
The severity of CVE-2017-14932 is not specified in the provided information.
How do I fix CVE-2017-14932 on Ubuntu?
To fix CVE-2017-14932 on Ubuntu, you need to install the latest available version of the Binutils package that includes the fix, such as version 2.29.90.20180122-1 or later.
How do I fix CVE-2017-14932 on Debian?
To fix CVE-2017-14932 on Debian, you need to install the latest available version of the Binutils package that includes the fix, such as version 2.31.1-16, 2.35.2-2, 2.40-2, or 2.41-5.