CVE-2017-17124

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not…

published December 4, 2017

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01841 · 78.7th percentile
Published
2017-12-04T08:00Z
EPSS history
Timeline
  • 04 DEC 08:00Z
    The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not…
    cvelistv5