CVE-2017-12448 — Use After Free in Binutils

CWE-416 — Use After Free11 documents8 sources
Severity
7.8HIGHNVD
EPSS
0.5%
top 34.51%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Binutils
Timeline
PublishedAug 4
Latest updateMay 17

Description

The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶Debiangnu/binutils< 2.29-9+3
▶NVDgnu/binutils2.29

Patches

Patch: sourceware.org ↗Patch: sourceware.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-vcp5-9fw7-xm53: The bfd_cache_close function in bfd/cache↗2022-05-17
▶
OSV
CVE-2017-12448: The bfd_cache_close function in bfd/cache↗2017-08-04
▶
CVEList
CVE-2017-12448: The bfd_cache_close function in bfd/cache↗2017-08-04
▶

📋Vendor Advisories

3
Ubuntu
GNU binutils vulnerabilities↗2021-07-21
▶
Red Hat
binutils: heap use after free in bfd_cache_close function↗2017-07-19
▶
Debian
CVE-2017-12448: binutils - The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) ...↗2017
▶

💬Community

4
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12448 binutils: heap use after free in bfd_cache_close function↗2017-08-21
▶
CVE-2017-12448 — Use After Free in GNU Binutils | cvebase