Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2017-7614

Опубликовано: 05 апр. 2017
Источник: redhat
CVSS3: 3.3
EPSS Низкий

Описание

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 5binutilsWill not fix
Red Hat Enterprise Linux 5binutils220Will not fix
Red Hat Enterprise Linux 6binutilsWill not fix
Red Hat Enterprise Linux 7binutilsWill not fix

Показывать по

Дополнительная информация

Статус:

Low
Дефект:
CWE-476
https://bugzilla.redhat.com/show_bug.cgi?id=1440837binutils: NULL pointer dereference in bfd_elf_final_link function

EPSS

Процентиль: 61%
0.00419
Низкий

3.3 Low

CVSS3

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 9 лет назад

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.

CVSS3: 9.8
nvd
почти 9 лет назад

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.

CVSS3: 9.8
debian
почти 9 лет назад

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as ...

CVSS3: 9.8
github
больше 3 лет назад

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.

suse-cvrf
около 8 лет назад

Security update for binutils

EPSS

Процентиль: 61%
0.00419
Низкий

3.3 Low

CVSS3