CVE-2017-9038

GNU Binutils 2.28 allows remote attackers to cause a denial of service
(heap-based buffer over-read and application crash) via a crafted ELF file,
related to the byte_get_little_endian function in elfcomm.c, the
get_unwind_section_word function in readelf.c, and ARM unwind information
that contains invalid word offsets.

Bugs

• <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863674&gt;