GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
BID:101280
Info
GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
| Bugtraq ID: | 101280 |
| Class: | Input Validation Error |
| CVE: |
CVE-2017-14974 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 01 2017 12:00AM |
| Updated: | Oct 01 2017 12:00AM |
| Credit: | skysider |
| Vulnerable: |
GNU Binutils 2.29 |
| Not Vulnerable: | |
Discussion
GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
GNU Binutils is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause a denial-of-service condition.
GNU Binutils 2.29 is vulnerable; other versions may also be affected.
GNU Binutils is prone to multiple denial-of-service vulnerabilities.
An attacker can exploit these issues to cause a denial-of-service condition.
GNU Binutils 2.29 is vulnerable; other versions may also be affected.
Exploit / POC
GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
GNU Binutils CVE-2017-14974 Multiple Denial of Service Vulnerabilities
References:
References:
- Bug 22163 - null pointer dereference in elf_x86_64_get_synthetic_symtab, elf64- (sourceware.org)
- GNU Homepage (binutils)
- x86: Return -1 if bfd_canonicalize_dynamic_reloc returns 0 (sourceware.org)