DEBIAN-CVE-2017-12459

DEBIAN-CVE-2017-12459 PUBLISHED CVSS 7.800000190734863 HIGH

The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file.

Risk Scores

CVSS v3.0

7.800000190734863

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
Debian:14	binutils	0, 0, 0
Debian:12	binutils	0, 0, 0
Debian:11	binutils	0, 0, 0
Debian:13	binutils	0, 0, 0

Timeline

Aug 4, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-12459 advisory

Open in Interactive Console →