CVE-2017-7301 in GNU binutils

Resumen (Inglés)

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an aout_link_add_symbols function in bfd/aoutx.h that has an off-by-one vulnerability because it does not carefully check the string offset. The vulnerability could lead to a GNU linker (ld) program crash.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2017-03-29

Divulgación

2017-03-29

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
99065	GNU binutils BFD aoutx.h aout_link_add_symbols escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2017-7301

Fuentes

• MITRE
• NVD
• CVE Details