Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-8396

Fixed in a distro release EPSS 2%

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, is vulnerable to an invalid read of size 1 because the existing reloc offset range tests didn't catch small negative offsets less than the size of the reloc field. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash.

Published 2017-05-01 · CVE record · OSV

Products: gnu binutils

Distro releases

ReleasePackageFixed in
Debian 12binutils2.28-5
Debian 13binutils2.28-5
Debian 14binutils2.28-5
SUSE Enterprise Storage 4binutils2.31-9.26.1
SUSE Linux Enterprise Desktop 12 SP2binutils2.29.1-9.20.2
SUSE Linux Enterprise Desktop 12 SP3binutils2.29.1-9.20.2
SUSE Linux Enterprise Desktop 12 SP3binutils2.31-9.26.1
SUSE Linux Enterprise Server 12 SP1-LTSSbinutils2.31-9.26.1
SUSE Linux Enterprise Server 12 SP2binutils2.29.1-9.20.2
SUSE Linux Enterprise Server 12 SP2-BCLbinutils2.31-9.26.1
SUSE Linux Enterprise Server 12 SP2-LTSSbinutils2.31-9.26.1
SUSE Linux Enterprise Server 12 SP3binutils2.31-9.26.1
SUSE Linux Enterprise Server 12 SP3binutils2.29.1-9.20.2
SUSE Linux Enterprise Server 12-LTSSbinutils2.31-9.26.1
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2binutils2.29.1-9.20.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1binutils2.29.1-9.20.2
SUSE Linux Enterprise Server for SAP Applications 12 SP1binutils2.31-9.26.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2binutils2.29.1-9.20.2
SUSE Linux Enterprise Server for SAP Applications 12 SP2binutils2.31-9.26.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3binutils2.29.1-9.20.2
SUSE Linux Enterprise Server for SAP Applications 12 SP3binutils2.31-9.26.1
SUSE Linux Enterprise Software Development Kit 12 SP2binutils2.29.1-9.20.2
SUSE Linux Enterprise Software Development Kit 12 SP2cross-ppc-binutils2.29.1-9.20.2
SUSE Linux Enterprise Software Development Kit 12 SP2cross-spu-binutils2.29.1-9.20.2
SUSE Linux Enterprise Software Development Kit 12 SP3binutils2.31-9.26.1
SUSE Linux Enterprise Software Development Kit 12 SP3binutils2.29.1-9.20.2
SUSE Linux Enterprise Software Development Kit 12 SP3cross-ppc-binutils2.31-9.26.1
SUSE Linux Enterprise Software Development Kit 12 SP3cross-ppc-binutils2.29.1-9.20.2
SUSE Linux Enterprise Software Development Kit 12 SP3cross-spu-binutils2.31-9.26.1
SUSE Linux Enterprise Software Development Kit 12 SP3cross-spu-binutils2.29.1-9.20.2
SUSE OpenStack Cloud 7binutils2.31-9.26.1
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1
openSUSE Tumbleweedbinutils2.37-1.3