DEBIAN-CVE-2017-12453

DEBIAN-CVE-2017-12453 PUBLISHED CVSS 7.800000190734863 HIGH

The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.

Risk Scores

CVSS v3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:14	binutils	0, 0, 0
Debian:13	binutils	0, 0, 0
Debian:11	binutils	0, 0, 0
Debian:12	binutils	0, 0, 0

Timeline

Aug 4, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-12453 advisory

Open in Interactive Console →