CVE-2017-9954

EPSS 0.42%
Published 26.06.2017 23:29:00
Last modified 20.04.2025 01:37:25
Source cve@mitre.org
Teams watchlist Login
Open Login

The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Gnu ≫ Binutils Version2.28

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.42%	0.608

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://security.gentoo.org/glsa/201709-02

http://www.securityfocus.com/bid/99307

https://sourceware.org/bugzilla/show_bug.cgi?id=21670

Patch

Issue Tracking

https://nvd.nist.gov/vuln/detail/CVE-2017-9954

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2017-9954

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2017-9954

EUVD