CVE-2017-9756: Buffer Overflow
Last updated 24 July 2024
Other sources
The aarch64extldstreglist function in opcodes/aarch64-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2017-9756?
CVE-2017-9756 is a vulnerability in GNU Binutils 2.28 that allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted binary file.
How does CVE-2017-9756 manifest?
CVE-2017-9756 manifests as a buffer overflow and application crash when a crafted binary file is mishandled.
Which software versions are affected by CVE-2017-9756?
CVE-2017-9756 affects GNU Binutils versions 2.28, but is fixed in version 2.29.
Where can I find more information about CVE-2017-9756?
You can find more information about CVE-2017-9756 in the following references: [sourceware.org](https://sourceware.org/bugzilla/show_bug.cgi?id=21595), [securityfocus.com](http://www.securityfocus.com/bid/99103), [exploit-db.com](https://www.exploit-db.com/exploits/42204/).
What is the Common Weakness Enumeration (CWE) for CVE-2017-9756?
CVE-2017-9756 is associated with CWE-119, which is a weakness related to buffer errors.