CVE-2017-12453

Published: Aug 4, 2017Modified: May 13, 2026

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.

Affected (1)

Products: Gnu: Binutils

Gnu

1 product

Binutils

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Up to 2.29

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://sourceware.org/bugzilla/show_bug.cgi?id=21813

Source: cve@mitre.org

Issue TrackingPatchThird Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=21813

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

Timeline

No history available yet.