CVE-2017-9755: Buffer Overflow
Last updated 24 July 2024
Other sources
opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9755?
CVE-2017-9755 is a vulnerability in the GNU Binutils 2.28 that allows remote attackers to cause a denial of service or possibly have other unspecified impacts through a crafted binary file.
How does CVE-2017-9755 occur?
CVE-2017-9755 occurs due to a buffer overflow and application crash in the opcodes/i386-dis.c file of GNU Binutils 2.28 when not considering the number of registers for bnd mode.
Which software versions are affected by CVE-2017-9755?
CVE-2017-9755 affects GNU Binutils 2.26.1-1ubuntu1~16.04.8+ to 2.29 (Ubuntu) and binutils 2.31.1-16 to 2.41-5 (Debian).
How can I fix CVE-2017-9755?
To fix CVE-2017-9755, update the GNU Binutils package to version 2.29 or later (Ubuntu), or version 2.41-5 or later (Debian).
Where can I find more information about CVE-2017-9755?
More information about CVE-2017-9755 can be found at the following references: [link1](https://sourceware.org/bugzilla/show_bug.cgi?id=21594), [link2](http://www.securityfocus.com/bid/99124), [link3](https://security.gentoo.org/glsa/201801-01).