DEBIAN-CVE-2017-12450

DEBIAN-CVE-2017-12450 PUBLISHED CVSS 7.800000190734863 HIGH

The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.

Risk Scores

CVSS v3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:11	binutils	0, 0, 0
Debian:13	binutils	0, 0, 0
Debian:12	binutils	0, 0, 0
Debian:14	binutils	0, 0, 0

Timeline

Aug 4, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-12450 advisory

Open in Interactive Console →