CVE-2017-7227

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash

published March 22, 2017

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02497 · 84.5th percentile
Published
2017-03-22T16:00Z
EPSS history
Timeline
  • 22 MAR 16:00Z
    GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash
    cvelistv5