CVE-2017-8421

The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak…

published May 2, 2017

CVSS
—
EPSS
1%
Percentile
61.3
In the wild
Unconfirmed
What it is

The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak vulnerability which can cause memory exhaustion in objdump via a crafted PE file. Additional validation in dump_relocs_in_section in objdump.c can resolve this.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00964 · 61.3th percentile
Published
2017-05-02T17:00Z
EPSS history
Timeline
  • 02 MAY 17:00Z
    The function coff_set_alignment_hook in coffcode.h in Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a memory leak…
    cvelistv5