Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-12967

Fixed in a distro release EPSS 3%

The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary.

Published 2017-08-19 · CVE record · OSV

Products: gnu binutils

Distro releases

ReleasePackageFixed in
Debian 12binutils2.29-5
Debian 13binutils2.29-5
Debian 14binutils2.29-5
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1