Lucene search

K
redhatcveRedhat.comRH:CVE-2017-9753
HistoryJul 11, 2017 - 3:21 p.m.

CVE-2017-9753

2017-07-1115:21:43
redhat.com
access.redhat.com
11

0.01 Low

EPSS

Percentile

83.7%

The versados_mkobject function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not initialize a certain data structure, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during “objdump -D” execution.