CVE-2017-8396: Input Validation
Last updated 24 July 2024
Other sources
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-8396?
CVE-2017-8396 is a vulnerability in the Binary File Descriptor (BFD) library, also known as libbfd, as distributed in GNU Binutils 2.28.
How does CVE-2017-8396 affect software?
CVE-2017-8396 can cause programs that use the affected library to crash, resulting in a denial of service.
Which versions of binutils are affected by CVE-2017-8396?
Binutils version 2.28 is affected by CVE-2017-8396.
How can I fix CVE-2017-8396?
To fix CVE-2017-8396, you should update to binutils version 2.31.1-16 or later.
Where can I find more information about CVE-2017-8396?
You can find more information about CVE-2017-8396 on the Sourceware Bugzilla and the Gentoo Security website.