CVE-2017-7225 in GNU binutils
Summary
The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and the directory name are both empty, triggering a NULL pointer dereference and an invalid write, and leading to a program crash.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
03/22/2017
Disclosure
03/22/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 98372 | GNU binutils addr2line find_nearest_line null pointer dereference | 476 | Not defined | Official fix | CVE-2017-7225 |