CVE-2017-7614: Null Pointer Dereference
elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2017-7614.
What is the affected software for this vulnerability?
The affected software for this vulnerability is GNU Binutils.
What is the severity of CVE-2017-7614?
The severity of CVE-2017-7614 is not specified.
How can remote attackers exploit CVE-2017-7614?
Remote attackers can exploit CVE-2017-7614 to cause a denial of service (application crash) or possibly have unspecified other impact.
How can I remediate CVE-2017-7614?
To remediate CVE-2017-7614, update GNU Binutils to version 2.26.1-1ubuntu1~16.04.8+ or apply the necessary updates from the respective package repositories.