CVE-2017-15024 PUBLISHED

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

EPSS 0.43% · 62.0th percentile

Risk Scores

EPSS Score
0.43%
62.0th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSbinutils2.26.1-1ubuntu1~16.04.8, 2.25.51.20151028-0ubuntu1, 2.25.51.20151106-0ubuntu1
Ubuntu:Pro:14.04:LTSbinutils2.23.52.20130913-0ubuntu1, 2.23.90.20131017-1ubuntu1, 2.23.90.20131116-1ubuntu1

Timeline

References

Open in Interactive Console →