CVE-2017-15996: Buffer Overflow
elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the getarchivemembername, processarchiveindexandsymbols, and setuparchive functions.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-15996?
CVE-2017-15996 is a vulnerability in GNU Binutils 2.29 that allows remote attackers to cause a denial of service or possibly have other unspecified impact via a crafted ELF file.
How does CVE-2017-15996 impact the affected software?
CVE-2017-15996 can cause a denial of service due to excessive memory allocation or potentially have other unspecified impact.
What is the affected software for CVE-2017-15996?
The affected software for CVE-2017-15996 is GNU Binutils version 2.29.
How can I fix the CVE-2017-15996 vulnerability in Ubuntu?
To fix the CVE-2017-15996 vulnerability in Ubuntu, update the binutils package to version 2.26.1-1ubuntu1~16.04.8+ or higher.
Is there a fix available for CVE-2017-15996 in Debian?
Yes, to fix the CVE-2017-15996 vulnerability in Debian, update the binutils package to version 2.31.1-16, 2.35.2-2, 2.40-2, or 2.41-5.