CVE-2017-9954

The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to…

published June 26, 2017

CVSS
—
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01561 · 74.9th percentile
Published
2017-06-26T23:00Z
EPSS history
Timeline
  • 26 JUN 23:00Z
    The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to…
    cvelistv5