VDB

CVE-2017-14130

CVE-2017-14130 PUBLISHED CVSS 5.5 MEDIUM

The _bfd_elf_parse_attributes function in elf-attrs.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (_bfd_elf_attr_strdup heap-based buffer over-read and application crash) via a crafted ELF file.

EPSS 1.55% · 74.2th percentile

Risk Scores

CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
1.55%
74.2th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSbinutils2.23.52.20130913-0ubuntu1, 0, 2.23.90.20131017-1ubuntu1
Ubuntu:Pro:16.04:LTSbinutils2.26.1-1ubuntu1~16.04.4, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6

Timeline

  • Sep 4, 2017 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Oct 27, 2021 EPSS Score
  • Dec 29, 2021 EPSS Score
  • Mar 2, 2022 EPSS Score
  • May 4, 2022 EPSS Score
  • Sep 8, 2022 EPSS Score
  • Nov 10, 2022 EPSS Score
  • Jan 12, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • May 18, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›