high7.8Public exploit code
CVE-2017-9749
The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or pos…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- GNU binutils - 'decode_pseudodbg_assert_0' Buffer Overflow2017-06-19 · dos · linux · Verified
Impact
The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Binutils | Version 2.28 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99113
- https://security.gentoo.org/glsa/201801-01
- https://sourceware.org/bugzilla/show_bug.cgi?id=21586
- https://www.exploit-db.com/exploits/42201/
- http://www.securityfocus.com/bid/99113
- https://security.gentoo.org/glsa/201801-01
- https://sourceware.org/bugzilla/show_bug.cgi?id=21586
- https://www.exploit-db.com/exploits/42201/