CVE-2017-13710

Updated: 2024-11-30 03:15:03.53283

Description:

The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x MEDIUM 5
CVSS Version 3.x HIGH 7.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

CentOS 6 ELS binutils 2.20 7.5 HIGH Released CLSA-2021:1638803819 2022-05-05 12:03:00
CloudLinux 6 ELS binutils 2.20 7.5 HIGH Released 2021-12-06 11:56:05
Oracle Linux 6 ELS binutils 2.20 7.5 HIGH Released CLSA-2021:1637770725 2021-11-24 13:55:53
Ubuntu 16.04 ELS binutils 2.26 7.5 HIGH Released CLSA-2021:1635459139 2021-11-02 21:02:48