CVE-2017-9743
Fixed in a distro release EPSS 3%
The print_insn_score32 function in opcodes/score7-dis.c:552 in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Products: gnu binutils
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | binutils | 2.29-1 |
| Debian 13 | binutils | 2.29-1 |
| Debian 14 | binutils | 2.29-1 |
| Ubuntu Pro 14.04 LTS | binutils | no fix |
| Ubuntu Pro 16.04 LTS | binutils | 2.26.1-1ubuntu1~16.04.8+esm1 |