CVE-2017-9749: Buffer Overflow
Last updated 24 July 2024
Other sources
The regs macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-9749.
What is the severity of CVE-2017-9749?
The severity of CVE-2017-9749 is not specified in the available information.
How does CVE-2017-9749 manifest?
CVE-2017-9749 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.
What software is affected by CVE-2017-9749?
GNU Binutils version 2.28 is affected by CVE-2017-9749.
How can I fix CVE-2017-9749?
Apply the appropriate remedy specified for your software version.