CVE-2017-8395: Null Pointer Dereference
Last updated 24 July 2024
Other sources
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid write of size 8 because of missing a malloc() return-value check to see if memory had actually been allocated in the bfdgenericgetsectioncontents function. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objcopy, to crash.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-8395?
CVE-2017-8395 is a vulnerability in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, that allows an invalid write of size 8 due to a missing malloc() return-value check.
What is the severity of CVE-2017-8395?
The severity of CVE-2017-8395 is not specified in the information provided.
How does CVE-2017-8395 affect me?
If you are using GNU Binutils 2.28, your system may be vulnerable to an invalid write of size 8 due to this issue in the Binary File Descriptor (BFD) library (aka libbfd).
How can I fix CVE-2017-8395?
To fix CVE-2017-8395, you should update GNU Binutils to version 2.28-5 or newer.
Where can I find more information about CVE-2017-8395?
You can find more information about CVE-2017-8395 in the references provided: https://sourceware.org/bugzilla/show_bug.cgi?id=21431, https://security.gentoo.org/glsa/201709-02, https://launchpad.net/bugs/cve/CVE-2017-8395