CVE-2017-9041

2017-05-1801:29:01

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.7%

JSON

GNU Binutils 2.28 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.

CPENameOperatorVersion
binutils-gdb.giteqgdb_7_2-branchpoint
binutils-gdb.giteqgdb_6_7-branchpoint
binutils-gdb.giteqreadline_4_0
binutils-gdb.giteqgdb_5_2-branchpoint
binutils-gdb.giteqgdb_5_3-branchpoint
binutils-gdb.giteqgdb_7_0-branchpoint
binutils-gdb.giteqgdb_6_5-branchpoint
binutils-gdb.giteqgdb_7_4-branchpoint
binutils-gdb.giteqgdb-7.8-branchpoint
binutils-gdb.giteqgdb_6_4-branchpoint

Name	Operator	Version
binutils-gdb.git	eq	gdb_7_2-branchpoint
binutils-gdb.git	eq	gdb_6_7-branchpoint
binutils-gdb.git	eq	readline_4_0
binutils-gdb.git	eq	gdb_5_2-branchpoint
binutils-gdb.git	eq	gdb_5_3-branchpoint
binutils-gdb.git	eq	gdb_7_0-branchpoint
binutils-gdb.git	eq	gdb_6_5-branchpoint
binutils-gdb.git	eq	gdb_7_4-branchpoint
binutils-gdb.git	eq	gdb-7.8-branchpoint
binutils-gdb.git	eq	gdb_6_4-branchpoint