First published: Mon May 01 2017(Updated: )
Last updated 24 July 2024
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
GNU Binutils | =2.28 | |
debian/binutils | 2.35.2-2 2.40-2 2.43.50.20241215-1 2.43.50.20241221-1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-8393 is a vulnerability in the Binary File Descriptor (BFD) library (libbfd) as distributed in GNU Binutils 2.28.
CVE-2017-8393 affects the binutils package versions 2.26.1-1ubuntu1~16.04.8+ and 2.28-5 on Ubuntu, and various versions on Debian.
CVE-2017-8393 allows for a global buffer over-read error, potentially leading to a denial-of-service or information leakage.
To fix CVE-2017-8393 on Ubuntu, update the binutils package to version 2.26.1-1ubuntu1~16.04.8+.
To fix CVE-2017-8393 on Debian, update the binutils package to one of the following versions: 2.31.1-16, 2.35.2-2, 2.40-2, or 2.41-5.