CVE-2019-17450 PUBLISHED

find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

EPSS 1.08% · 77.7th percentile

Risk Scores

EPSS Score
1.08%
77.7th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSbinutils0, 2.23.52.20130913-0ubuntu1, 2.23.90.20131017-1ubuntu1
Ubuntu:Pro:16.04:LTSbinutils0, 2.25.1-6ubuntu1, 2.25.51.20151022-0ubuntu2
Ubuntu:18.04:LTSbinutils0, 2.29.1-4ubuntu1, 2.29.1-6ubuntu1

Timeline

References

Open in Interactive Console →