CVE-2017-16830 | BDVDB-2026-92945 Detail

Description#

The print_gnu_property_note function in readelf.c in GNU Binutils 2.29.1 does not have integer-overflow protection on 32-bit platforms, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted ELF file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://sourceware.org/bugzilla/show_bug.cgi?id=22384
https://security.gentoo.org/glsa/201811-17
http://www.securityfocus.com/bid/101941
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=6ab2c4ed51f9c4243691755e1b1d2149c6a426f4

Exploit#

No public exploit known

History#

Version 12017-11-15Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.