CVE-2017-12459 — Out-of-bounds Write in Binutils

CWE-787 — Out-of-bounds Write11 documents8 sources
Severity
7.8HIGHNVD
EPSS
0.4%
top 37.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
GNU Binutils
Timeline
PublishedAug 4
Latest updateMay 17

Description

The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶Debiangnu/binutils< 2.29-8+3
▶NVDgnu/binutils2.29

Patches

Patch: sourceware.org ↗Patch: sourceware.org ↗

🔴Vulnerability Details

3
GHSA
GHSA-88x6-2qh9-jm49: The bfd_mach_o_read_symtab_strtab function in bfd/mach-o↗2022-05-17
▶
CVEList
CVE-2017-12459: The bfd_mach_o_read_symtab_strtab function in bfd/mach-o↗2017-08-04
▶
OSV
CVE-2017-12459: The bfd_mach_o_read_symtab_strtab function in bfd/mach-o↗2017-08-04
▶

📋Vendor Advisories

3
Ubuntu
GNU binutils vulnerabilities↗2021-07-21
▶
Red Hat
binutils: out of bounds heap write in bfd_mach_o_read_symtab_strtab function↗2017-07-26
▶
Debian
CVE-2017-12459: binutils - The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File De...↗2017
▶

💬Community

4
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12448 CVE-2017-12449 CVE-2017-12450 CVE-2017-12451 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12455 CVE-2017-12456 CVE-2017-12457 CVE-2017-12458 CVE-2017-12459 CVE-2017-13710 CVE-2↗2017-08-21
▶
Bugzilla
CVE-2017-12459 binutils: out of bounds heap write in bfd_mach_o_read_symtab_strtab function↗2017-08-21
▶
CVE-2017-12459 — Out-of-bounds Write in GNU Binutils | cvebase