CVE-2017-17123: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The coffslurpreloctable function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2017-17123.
What is the title of this vulnerability?
The title of this vulnerability is 'The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka l...'
What is the description of this vulnerability?
The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.
What software is affected by this vulnerability?
The affected software is binutils versions 2.26.1-1ubuntu1~16.04.8+ to 2.29.90.20180122-1, and versions 2.31.1-16, 2.35.2-2, 2.40-2, and 2.41-5 of the package from the Debian repository.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: - https://sourceware.org/bugzilla/show_bug.cgi?id=22509 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=4581a1c7d304ce14e714b27522ebf3d0188d6543 - https://security.gentoo.org/glsa/201811-17