Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-9743

Fixed in a distro release EPSS 3%

The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.

Published 2017-06-19 · CVE record · OSV

Products: gnu binutils

Distro releases

ReleasePackageFixed in
Debian 12binutils2.29-1
Debian 13binutils2.29-1
Debian 14binutils2.29-1
Ubuntu Pro 14.04 LTSbinutilsno fix
Ubuntu Pro 16.04 LTSbinutils2.26.1-1ubuntu1~16.04.8+esm1