DEBIAN-CVE-2017-7302

DEBIAN-CVE-2017-7302 PUBLISHED CVSS 7.5 HIGH

The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a swap_std_reloc_out function in bfd/aoutx.h that is vulnerable to an invalid read (of size 4) because of missing checks for relocs that could not be recognised. This vulnerability causes Binutils utilities like strip to crash.

Risk Scores

CVSS v3.0

7.5

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:11	binutils	0, 0, 0
Debian:14	binutils	0, 0, 0
Debian:13	binutils	0, 0, 0
Debian:12	binutils	0, 0, 0

Timeline

Mar 29, 2017 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2017-7302 advisory

Open in Interactive Console →