NVD

Id
84054  
Name
CVE-2017-7299  
Description
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has an invalid read (of size 8) because the code to emit relocs (bfd_elf_final_link function in bfd/elflink.c) does not check the format of the input file before trying to read the ELF reloc section header. The vulnerability leads to a GNU linker (ld) program crash.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-04-27  
Published
2017-03-29  
Modified Date
2017-03-31  
Seq
2017-7299  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412345 84054 CVE-2017-6429 20170306 CVE-2017-6429: Buffer overflow vulnerability in Tcpreplay tcpcapinfo utility  View
412346 84054 CVE-2017-6429 96579  View
412347 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9  View
412348 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/issues/278  View
412349 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1  View
412350 84054 CVE-2017-6429 20170306 CVE-2017-6429: Buffer overflow vulnerability in Tcpreplay tcpcapinfo utility  View
412351 84054 CVE-2017-6429 96579  View
412352 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/commit/d689d14dbcd768c028eab2fb378d849e543dcfe9  View
412353 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/issues/278  View
412354 84054 CVE-2017-6429 https://github.com/appneta/tcpreplay/releases/tag/v4.2.0-beta1  View
413526 84054 CVE-2017-2689 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View
413527 84054 CVE-2017-2689 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View
413528 84054 CVE-2017-2689 https://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-327980.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66375 JVNDB-2017-002713 GNU Binutils で配布される Binary File Descriptor ライブラリにおける境界外読み取りに関する脆弱性 GNU Binutils で配布される Binary File Descriptor (BFD) ライブラリ (別名 libbfd) には、境界外読み取りに関する脆弱性が存在します。 CVE-2017-7299 0 CVE-2017-7299 84054 4.3 5.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002713.html 2017-03-29 2017-04-26 View