CRITICAL🇬🇧 English

CVE-2017-7226

CVSS 9.1v3.0pub. 2017-03-22upd. 2026-05-13

The pe_ILF_object_p function in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to a heap-based buffer over-read of size 4049 because it uses the strlen function instead of strnlen, leading to program crashes in several utilities such as addr2line, size, and strings. It could lead to information disclosure as well.

oryginał EN
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

  • Gnu Binutils

    APP
    Gnu
    2.28
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2018-12699CRITICAL9.8ten sam produkt

finish_stab in stabs.c in GNU Binutils 2.30 allows attackers to cause a denial of service (heap-based buffer o...

CVE-2017-7614CRITICAL9.8ten sam produkt

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a...

CVE-2014-9939CRITICAL9.8ten sam produkt

ihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in Intel Hex objec...

CVE-2017-6969CRITICAL9.1ten sam produkt

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 bina...

CVE-2026-6846HIGH7.8ten sam produkt

A flaw was found in binutils. A heap-buffer-overflow vulnerability exists when processing a specially crafted ...