CVE-2017-16828: Integer Overflow
Last updated 24 July 2024
Other sources
The displaydebugframes function in dwarf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (integer overflow and heap-based buffer over-read, and application crash) or possibly have unspecified other impact via a crafted ELF file, related to printdebugframe.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-16828?
CVE-2017-16828 is a vulnerability in GNU Binutils 2.29.1 that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted ELF file.
How does CVE-2017-16828 impact GNU Binutils?
CVE-2017-16828 can cause a denial of service (integer overflow and heap-based buffer over-read) or possibly have other unspecified impact on GNU Binutils.
How can I fix CVE-2017-16828 on Ubuntu?
To fix CVE-2017-16828 on Ubuntu, upgrade to version 2.29.90.20180122-1 of the binutils package.
How can I fix CVE-2017-16828 on Debian?
To fix CVE-2017-16828 on Debian, upgrade to version 2.31.1-16, 2.35.2-2, 2.40-2, or 2.41-5 of the binutils package.
Where can I find more information about CVE-2017-16828?
You can find more information about CVE-2017-16828 on the official Sourceware bugzilla page, the binutils-gdb gitweb page, and the Gentoo security advisory GLSA 201811-17.