CVE-2017-7227 | BDVDB-2026-83063 Detail

Description#

GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceware.org/bugzilla/show_bug.cgi?id=20906
https://security.gentoo.org/glsa/201801-01
http://www.securityfocus.com/bid/97209

Exploit#

No public exploit known

History#

Version 12017-03-22Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.