CVE-2017-9754: Buffer Overflow
Last updated 24 July 2024
Other sources
The processotr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9754?
CVE-2017-9754 is a vulnerability in the Binary File Descriptor (BFD) library, also known as libbfd, that allows remote attackers to cause a denial of service or potentially execute arbitrary code.
What software is affected by CVE-2017-9754?
This vulnerability affects the Binutils package with versions 2.26.1-1ubuntu1~16.04.8+, 2.29, and 2.31.1-16, 2.35.2-2, 2.40-2, and 2.41-5 in Debian.
How can the CVE-2017-9754 vulnerability be exploited?
An attacker could exploit this vulnerability by sending malicious input to the process_otr function in the BFD library, causing a buffer overflow and potentially crashing the application or executing arbitrary code.
Are there any known remedies for CVE-2017-9754?
Yes, the Binutils package in Ubuntu version 2.26.1-1ubuntu1~16.04.8+ and the upcoming version 2.29 have been patched to fix this vulnerability.
Where can I find more information about CVE-2017-9754?
You can find more information about CVE-2017-9754 in the following references: [Link 1](https://sourceware.org/bugzilla/show_bug.cgi?id=21591), [Link 2](http://www.securityfocus.com/bid/99125), [Link 3](https://launchpad.net/bugs/cve/CVE-2017-9754).