| Vulnerability Name: | CVE-2017-9742 (CCN-127539) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2017-06-19 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2017-06-19 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2017-09-19 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2017-9742 Source: CCN Type: IBM Security Bulletin 2012609 (PureData System for Analytics) Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients. Source: BID Type: Third Party Advisory, VDB Entry 99105 Source: CCN Type: BID-99105 GNU Binutils 'opcodes/score7-dis.c' Remote Denial of Service Vulnerability Source: XF Type: UNKNOWN gnu-binutils-cve20179742-dos(127539) Source: CCN Type: Packet Storm Security [06-20-2017] GNU binutils print_insn_score16 Buffer Overflow Source: GENTOO Type: UNKNOWN GLSA-201709-02 Source: CCN Type: Sourceware Bugzilla Bug 21576 global-buffer-overflow in print_insn_score16 Source: CONFIRM Type: Issue Tracking, Patch, Third Party Advisory https://sourceware.org/bugzilla/show_bug.cgi?id=21576 Source: CCN Type: Binutils GIT Repository Fix seg-fault when trying to disassemble a corrupt score binary Source: EXPLOIT-DB Type: UNKNOWN 42203 Source: CCN Type: GNU Binutils Web site GNU Binutils Source: CCN Type: WhiteSource Vulnerability Database CVE-2017-9742 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||