Oval Definition:oval:com.ubuntu.artful:def:201713757000
Revision Date:2017-08-29Version:1
Title:CVE-2017-13757 on Ubuntu 17.10 (artful) - medium.
Description:The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not validate the PLT section size, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2017-13757
Platform(s):Ubuntu 17.10
Product(s):
Definition Synopsis
  • Ubuntu 17.10 (artful) is installed.
  • AND NOT While related to the CVE in some way, the 'binutils' package in artful is not affected (note: '2.29.1-1ubuntu1').
  • BACK