high7.8Public exploit code
CVE-2017-9746
The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) o…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU binutils - 'disassemble_bytes' Heap Overflow2017-06-19 · dos · linux · Verified
Impact
The disassemble_bytes function in objdump.c in GNU Binutils 2.28 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of rae insns printing for this file during "objdump -D" execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Binutils | Version 2.28 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99117
- https://security.gentoo.org/glsa/201801-01
- https://sourceware.org/bugzilla/show_bug.cgi?id=21580
- https://www.exploit-db.com/exploits/42199/
- http://www.securityfocus.com/bid/99117
- https://security.gentoo.org/glsa/201801-01
- https://sourceware.org/bugzilla/show_bug.cgi?id=21580
- https://www.exploit-db.com/exploits/42199/