VDB

DEBIAN-CVE-2017-15996

DEBIAN-CVE-2017-15996 PUBLISHED CVSS 7.800000190734863 HIGH

elfcomm.c in readelf in GNU Binutils 2.29 allows remote attackers to cause a denial of service (excessive memory allocation) or possibly have unspecified other impact via a crafted ELF file that triggers a "buffer overflow on fuzzed archive header," related to an uninitialized variable, an improper conditional jump, and the get_archive_member_name, process_archive_index_and_symbols, and setup_archive functions.

Risk Scores

CVSS 3.0
7.800000190734863
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:14binutils0, 0, 0
Debian:13binutils0, 0, 0
Debian:11binutils0, 0, 0
Debian:12binutils0, 0, 0

Timeline

  • Oct 29, 2017 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›