CVE-2017-9041: Medium severity GNU binutils vulnerability
GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the processmipsspecific function in readelf.c.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2017-9041?
CVE-2017-9041 is a vulnerability in GNU Binutils 2.28 that allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file.
How does CVE-2017-9041 impact the affected software?
CVE-2017-9041 can cause a denial of service (heap-based buffer over-read and application crash) in GNU Binutils 2.28.
Which versions of GNU Binutils are affected by CVE-2017-9041?
GNU Binutils versions 2.28 and earlier are affected by CVE-2017-9041.
How can I fix CVE-2017-9041 in Ubuntu 16.04?
To fix CVE-2017-9041 in Ubuntu 16.04, update to version 2.26.1-1ubuntu1~16.04.8 or later of the binutils package.
How can I fix CVE-2017-9041 in Debian?
To fix CVE-2017-9041 in Debian, update to version 2.31.1-16, 2.35.2-2, 2.40-2, or 2.41-5 of the binutils package.