CVE-2017-16831: Integer Overflow
coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate the symbol count, which allows remote attackers to cause a denial of service (integer overflow and application crash, or excessive memory allocation) or possibly have unspecified other impact via a crafted PE file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-16831?
CVE-2017-16831 is a vulnerability in the Binary File Descriptor (BFD) library, as distributed in GNU Binutils 2.29.1, that allows remote attackers to cause a denial of service or possibly have unspecified impact.
Which software is affected by CVE-2017-16831?
The Binutils package, specifically version 2.29.1, is affected by CVE-2017-16831.
How can CVE-2017-16831 be fixed?
To fix CVE-2017-16831, it is recommended to update the Binutils package to version 2.29.90.20180122-1 or newer.
What is the severity of CVE-2017-16831?
The severity of CVE-2017-16831 is not specified, but it can result in a denial of service or possibly have other unspecified impacts.
Where can I find more information about CVE-2017-16831?
You can find more information about CVE-2017-16831 on the Sourceware Bugzilla page, the Binutils Git repository, and the Gentoo Security Advisory.