CVE-2017-7210 PUBLISHED

objdump in GNU Binutils 2.28 is vulnerable to multiple heap-based buffer over-reads (of size 1 and size 8) while handling corrupt STABS enum type strings in a crafted object file, leading to program crash.

EPSS 0.31% · 54.4th percentile

Risk Scores

EPSS Score
0.31%
54.4th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSbinutils2.26.1-1ubuntu1~16.04.8, 2.25.51.20151028-0ubuntu1, 2.25.51.20151106-0ubuntu1
Ubuntu:Pro:14.04:LTSbinutils2.23.52.20130913-0ubuntu1, 2.23.90.20131017-1ubuntu1, 2.23.90.20131116-1ubuntu1

Timeline

References

Open in Interactive Console →