Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-17126

Опубликовано: 04 дек. 2017
Источник: ubuntu
Приоритет: low
CVSS2: 6.8
CVSS3: 7.8

Описание

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

2.30-21ubuntu1~18.04.1
cosmic

not-affected

2.31.1-6ubuntu1.1
devel

not-affected

2.32-8ubuntu1
disco

not-affected

2.32-7ubuntu4
eoan

not-affected

2.32-8ubuntu1
esm-infra-legacy/trusty

not-affected

code not present
esm-infra/bionic

not-affected

2.30-21ubuntu1~18.04.1
esm-infra/xenial

not-affected

code not present
precise/esm

not-affected

code not present

Показывать по

Ссылки на источники

6.8 Medium

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 3.3
redhat
около 8 лет назад

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

CVSS3: 7.8
nvd
около 8 лет назад

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

CVSS3: 7.8
debian
около 8 лет назад

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 al ...

CVSS3: 7.8
github
больше 3 лет назад

The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

CVSS3: 8.8
fstec
около 8 лет назад

Уязвимость функции load_debug_section компонента readelf.c программного средства разработки GNU Binutils, позволяющая нарушителю получить доступ к конфиденциальным данным, нарушить их целостность, а также вызвать отказ в обслуживании

6.8 Medium

CVSS2

7.8 High

CVSS3