Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-13716

Опубликовано: 28 авг. 2017
Источник: debian
EPSS Низкий

Описание

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

Пакеты

ПакетСтатусВерсия исправленияРелизТип
binutilsunfixedpackage

Примечания

  • https://sourceware.org/bugzilla/show_bug.cgi?id=22009

  • Underlying bug is though in the C++ demangler part of libiberty, but MITRE

  • has assigned it specifically to the issue as raised within binutils.

  • binutils not covered by security support

EPSS

Процентиль: 70%
0.01399
Низкий

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 9 лет назад

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

CVSS3: 3.3
redhat
почти 9 лет назад

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

CVSS3: 5.5
nvd
почти 9 лет назад

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

CVSS3: 5.5
github
больше 4 лет назад

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

CVSS3: 6.5
fstec
почти 9 лет назад

Уязвимость компонента cplus-dem.c программного средства разработки GNU Binutils, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 70%
0.01399
Низкий