CVE-2017-16832
Summary
| CVE | CVE-2017-16832 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-11-15 08:29:00 UTC |
| Updated | 2023-11-07 02:40:00 UTC |
| Description | The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file. |
Risk And Classification
Problem Types: CWE-190
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Binutils: Multiple vulnerabilities (GLSA 201811-17) — Gentoo security | GENTOO | security.gentoo.org | |
| sourceware.org Git - binutils-gdb.git/commit | sourceware.org | ||
| sourceware.org Git - binutils-gdb.git/commit | CONFIRM | sourceware.org | Patch |
| 22373 – Integer overflow in pe_bfd_read_buildid() | CONFIRM | sourceware.org | Exploit, Issue Tracking, Patch |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 710297 Gentoo Linux Binutils Multiple Vulnerabilities (GLSA 201811-17)