CVE-2017-7299

🗓️ 29 Mar 2017 15:00:00Reported by mitreType

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash

Reporter	Title	Published	Views	Family All 63
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	18 Oct 201903:10	–	ibm
CloudLinux	Fix of CVE: CVE-2017-15022, CVE-2017-9742, CVE-2017-9749, CVE-2017-14940, CVE-2017-15225, CVE-2017-9753, CVE-2017-14130, CVE-2017-14333, CVE-2017-8421, CVE-2017-8398, CVE-2017-12448, CVE-2017-16826, CVE-2017-15938, CVE-2017-16831, CVE-2017-9744, CVE-2017-12455, CVE-2017-15996, CVE-2017-8396, CVE-2017-12451, CVE-2017-7614, CVE-2017-12452, CVE-2017-9748, CVE-2017-7225, CVE-2017-7302, CVE-2017-12449, CVE-2017-12458, CVE-2017-16827, CVE-2017-15939, CVE-2017-7227, CVE-2017-7226, CVE-2017-16828, CVE-2017-17121, CVE-2017-12453, CVE-2017-17080, CVE-2017-17124, CVE-2017-7223, CVE-2017-9747, CVE-2017-12457, CVE-2017-12456, CVE-2017-7299, CVE-2017-7300, CVE-2017-9754, CVE-2017-13710, CVE-2017-12450, CVE-2017-7301, CVE-2017-8394, CVE-2017-12454, CVE-2017-14932, CVE-2017-15020, CVE-2017-17123, CVE-2017-12459, CVE-2017-7224, CVE-2017-17125, CVE-2017-12799, CVE-2017-8393, CVE-2017-14938	24 Nov 202116:19	–	cloudlinux
CloudLinux	Fix of 56 CVEs	6 Dec 202115:16	–	cloudlinux
CNVD	GNU Binutils Remote Denial of Service Vulnerability (CNVD-2017-05404)	31 Mar 201700:00	–	cnvd
Cvelist	CVE-2017-7299	29 Mar 201715:00	–	cvelist
Debian CVE	CVE-2017-7299	29 Mar 201715:00	–	debiancve
Tenable Nessus	EulerOS 2.0 SP5 : binutils (EulerOS-SA-2019-2129)	12 Nov 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP2 : binutils (EulerOS-SA-2019-2450)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : binutils (EulerOS-SA-2019-2558)	19 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS Virtualization for ARM 64 3.0.2.0 : binutils (EulerOS-SA-2020-1205)	13 Mar 202000:00	–	nessus