CVE-2017-15225: Medium severity binutils vulnerability
bfddwarf2cleanupdebuginfo in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-15225?
CVE-2017-15225 is a vulnerability in the Binary File Descriptor (BFD) library that allows remote attackers to cause a denial of service (memory leak) via a crafted ELF file.
How does CVE-2017-15225 affect users?
Users using GNU Binutils 2.29 may be affected by CVE-2017-15225 if they encounter a crafted ELF file.
Which software versions are affected by CVE-2017-15225?
GNU Binutils 2.29 and some older versions, such as 2.26.1-1ubuntu1~16.04.8+ and 2.31.1-16, 2.35.2-2, 2.40-2, and 2.41-5 in Debian.
How can I fix CVE-2017-15225?
Users should update their GNU Binutils package to version 2.29.90.20180122-1 on Ubuntu or follow the recommended remedy for their specific package and distribution.
Where can I find more information about CVE-2017-15225?
More information about CVE-2017-15225 can be found in the Bugzilla and Gitweb links provided in the references.