CVE-2017-9748

The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote…

published June 19, 2017

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. NOTE: this may be related to a compiler bug.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07859 · 94.7th percentile
Published
2017-06-19T04:00Z
EPSS history
Timeline
  • 19 JUN 04:00Z
    The ieee_object_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, might allow remote…
    cvelistv5