| Vulnerability Name: | CVE-2017-9752 (CCN-127551) | ||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2017-06-13 | ||||||||||||||||||||||||||||||||||||||||
| Published: | 2017-06-13 | ||||||||||||||||||||||||||||||||||||||||
| Updated: | 2017-06-26 | ||||||||||||||||||||||||||||||||||||||||
| Summary: | bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file in the _bfd_vms_get_value and _bfd_vms_slurp_etir functions during "objdump -D" execution. | ||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
4.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
| ||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)
| ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Denial of Service | ||||||||||||||||||||||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2017-9752 Source: CCN Type: IBM Security Bulletin 2012609 (PureData System for Analytics) Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients. Source: BID Type: Third Party Advisory, VDB Entry 99122 Source: CCN Type: BID-99122 GNU Binutils 'bfd/vms-alpha.c' Remote Buffer Overflow Vulnerability Source: XF Type: UNKNOWN gnu-binutils-cve20179752-dos(127551) Source: CCN Type: Sourceware Bugzilla Bug 21589 heap-buffer-overflow in bfd_getl64 Source: CONFIRM Type: Issue Tracking, Patch, Third Party Advisory https://sourceware.org/bugzilla/show_bug.cgi?id=21589 Source: CCN Type: Binutils GIT Repository Fix potential address violations when processing a corrupt Alpha VMA binary Source: CCN Type: WhiteSource Vulnerability Database CVE-2017-9752 | ||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||