CVE-2017-9752: Buffer Overflow
bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the bfdvmsgetvalue and bfdvmsslurpetir functions during "objdump -D" execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9752?
CVE-2017-9752 is a vulnerability in the Binary File Descriptor (BFD) library, which allows remote attackers to cause a denial of service or potentially have other impact via a crafted binary file.
What software is affected by CVE-2017-9752?
GNU Binutils 2.28 is affected by CVE-2017-9752.
How can I fix CVE-2017-9752?
To fix CVE-2017-9752, update the affected software to version 2.29-1 or later.
Where can I find more information about CVE-2017-9752?
You can find more information about CVE-2017-9752 in the references section.
What is the Common Weakness Enumeration (CWE) ID for CVE-2017-9752?
The CWE ID for CVE-2017-9752 is CWE-119.