CVE-2017-9751: Buffer Overflow
Last updated 24 July 2024
Other sources
opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.35.2-2Fixed in 2.40-2Fixed in 2.44-3
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2017-9751.
What is the severity of CVE-2017-9751?
The severity of CVE-2017-9751 is not specified.
How does CVE-2017-9751 affect GNU Binutils?
CVE-2017-9751 affects GNU Binutils version 2.28.
How can remote attackers exploit CVE-2017-9751?
Remote attackers can exploit CVE-2017-9751 by sending a crafted binary file, causing a denial of service or other impact.
What is the recommended remedy for CVE-2017-9751?
The recommended remedy for CVE-2017-9751 is to update GNU Binutils to version 2.29-1 or later.