CVE-2019-17450: Medium severity binutils vulnerability
findabstractinstance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-17450?
CVE-2019-17450 is a vulnerability in the libbfd library, as distributed in GNU Binutils 2.32, that allows remote attackers to cause a denial of service.
What is the severity of CVE-2019-17450?
The severity of CVE-2019-17450 is not specified in the provided information.
How does CVE-2019-17450 impact Binutils?
CVE-2019-17450 can cause a denial of service in the Binary File Descriptor (BFD) library, which is a part of Binutils.
Which software versions are affected by CVE-2019-17450?
Versions 2.30-21ubuntu1~18.04.3 and 2.26.1-1ubuntu1~16.04.8+ of Binutils on Ubuntu, and versions up to 2.31.1-16 on Debian are affected.
How can I fix CVE-2019-17450?
To fix CVE-2019-17450, update Binutils to version 2.35.2-2, 2.40-2, or 2.41-5 on Debian, or follow the remedy provided by Ubuntu for the specific affected versions.