Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2017-17123 Details

Description

The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://security.gentoo.org/glsa/201811-17 CVE
https://sourceware.org/bugzilla/show_bug.cgi?id=22509 CVEExploitIssue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543 CVE
https://security.gentoo.org/glsa/201811-17 [email protected]
https://sourceware.org/bugzilla/show_bug.cgi?id=22509 [email protected]ExploitIssue Tracking

see all 6 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-476NULL Pointer Dereference[email protected]

Affected Products

ProductVersions
gnu binutils
2.29.1

CPE

  • cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

7 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2017-17123
NVD Published Date:
Dec 4, 2017
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2017-17123 Details - Not Deferred