Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-15996

Опубликовано: 29 окт. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 6.8
EPSS Низкий

Описание

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*

EPSS

Процентиль: 54%
0.00314
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 8 лет назад

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

CVSS3: 3.3
redhat
больше 8 лет назад

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

CVSS3: 7.8
debian
больше 8 лет назад

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to c ...

CVSS3: 7.8
github
больше 3 лет назад

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

CVSS3: 8.8
fstec
больше 8 лет назад

Уязвимость компонента elfcomm.c программного средства разработки GNU Binutils, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

EPSS

Процентиль: 54%
0.00314
Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-119