CVE-2017-9743: Buffer Overflow
The printinsnscore32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9743?
CVE-2017-9743 has a medium severity rating due to its potential to cause denial of service via a buffer overflow.
How do I fix CVE-2017-9743?
To fix CVE-2017-9743, upgrade GNU Binutils to version 2.29 or later where this vulnerability is patched.
What systems are affected by CVE-2017-9743?
CVE-2017-9743 specifically affects GNU Binutils version 2.28.
What type of attack does CVE-2017-9743 enable?
CVE-2017-9743 enables remote attackers to launch denial of service attacks by exploiting a buffer overflow in a crafted binary file.
What is the context of exploitation for CVE-2017-9743?
CVE-2017-9743 can be exploited when a user processes a malformed binary file using functions from the GNU Binutils.