CVE-2017-9748: Buffer Overflow
Last updated 24 July 2024
Other sources
The ieeeobjectp function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9748?
CVE-2017-9748 is a vulnerability in the Binary File Descriptor (BFD) library (aka libbfd) as distributed in GNU Binutils 2.28, which could allow remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted binary file.
How can CVE-2017-9748 be exploited?
CVE-2017-9748 can be exploited by sending a crafted binary file to the vulnerable system, causing a buffer overflow and application crash.
Which software versions are affected by CVE-2017-9748?
Versions 2.28 of GNU Binutils and older versions are affected by CVE-2017-9748.
How can I fix CVE-2017-9748?
To fix CVE-2017-9748, update to version 2.29-1 or later of the binutils package on Ubuntu, or follow the recommended updates for the specific operating system and package version.
Where can I find more information about CVE-2017-9748?
More information about CVE-2017-9748 can be found at the following references: [https://sourceware.org/bugzilla/show_bug.cgi?id=21582](https://sourceware.org/bugzilla/show_bug.cgi?id=21582), [http://www.securityfocus.com/bid/99110](http://www.securityfocus.com/bid/99110), [https://www.exploit-db.com/exploits/42202/](https://www.exploit-db.com/exploits/42202/).