The vulnerability of the nm.c and objdump.c components of the GNU Binutils development environment allows a hacker to gain access to confidential data, compromise their integrity, and cause service failures.

🗓️ 14 Nov 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 9 Views

Binutils nm and objdump flaw allows crafted executable to read beyond buffer, exposing data and causing failures.

Reporter	Title	Published	Views	Family All 50
CloudLinux	Fix of CVE: CVE-2017-15022, CVE-2017-9742, CVE-2017-9749, CVE-2017-14940, CVE-2017-15225, CVE-2017-9753, CVE-2017-14130, CVE-2017-14333, CVE-2017-8421, CVE-2017-8398, CVE-2017-12448, CVE-2017-16826, CVE-2017-15938, CVE-2017-16831, CVE-2017-9744, CVE-2017-12455, CVE-2017-15996, CVE-2017-8396, CVE-2017-12451, CVE-2017-7614, CVE-2017-12452, CVE-2017-9748, CVE-2017-7225, CVE-2017-7302, CVE-2017-12449, CVE-2017-12458, CVE-2017-16827, CVE-2017-15939, CVE-2017-7227, CVE-2017-7226, CVE-2017-16828, CVE-2017-17121, CVE-2017-12453, CVE-2017-17080, CVE-2017-17124, CVE-2017-7223, CVE-2017-9747, CVE-2017-12457, CVE-2017-12456, CVE-2017-7299, CVE-2017-7300, CVE-2017-9754, CVE-2017-13710, CVE-2017-12450, CVE-2017-7301, CVE-2017-8394, CVE-2017-12454, CVE-2017-14932, CVE-2017-15020, CVE-2017-17123, CVE-2017-12459, CVE-2017-7224, CVE-2017-17125, CVE-2017-12799, CVE-2017-8393, CVE-2017-14938	24 Nov 202116:19	–	cloudlinux
CloudLinux	Fix of 56 CVEs	6 Dec 202115:16	–	cloudlinux
CNVD	GNU Binutils Denial of Service Vulnerability (CNVD-2017-36675)	5 Dec 201700:00	–	cnvd
CVE	CVE-2017-17125	4 Dec 201708:00	–	cve
Cvelist	CVE-2017-17125	4 Dec 201708:00	–	cvelist
Debian CVE	CVE-2017-17125	4 Dec 201708:00	–	debiancve
Tenable Nessus	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2129)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1205)	13 Mar 202000:00	–	nessus
Tenable Nessus	EulerOS Virtualization 3.0.2.2 : binutils (EulerOS-SA-2020-1466)	16 Apr 202000:00	–	nessus
Tenable Nessus	GLSA-201811-17 : Binutils: Multiple vulnerabilities	27 Nov 201800:00	–	nessus

Vulners

Node

gnu_general_public_license gnu_binutilsMatch2.29.1

Source	Link
security	www.security.gentoo.org/glsa/201811-17
security-tracker	www.security-tracker.debian.org/tracker/CVE-2017-17125
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20230315SE81
web	www.web.nvd.nist.gov/view/vuln/detail

14 Nov 2023 00:00Current

7.1High risk

Vulners AI Score7.1

CVSS 38.8

CVSS 210

EPSS0.01638

binutils executable format buffer overread crafted input security vulnerability