CVE-2017-12453

The _bfd_vms_slurp_eeom function in libbfd.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms alpha file.

• CWE-125

• https://sourceware.org/bugzilla/show_bug.cgi?id=21813Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=21813Issue Tracking, Patch, Third Party Advisory

Published

Aug 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-12448The bfd_cache_close function in bfd/cache.c in the Binary Fi…
• CVE-2017-12449The _bfd_vms_save_sized_string function in vms-misc.c in the…
• CVE-2017-1245IBM Rational Software Architect Design Manager 5.0 and 6.0 i…
• CVE-2017-12450The alpha_vms_object_p function in bfd/vms-alpha.c in the Bi…
• CVE-2017-12451The _bfd_xcoff_read_ar_hdr function in bfd/coff-rs6000.c and…
• CVE-2017-12452The bfd_mach_o_i386_canonicalize_one_reloc function in bfd/m…
• CVE-2017-12454The _bfd_vms_slurp_egsd function in bfd/vms-alpha.c in the B…
• CVE-2017-12455The evax_bfd_print_emh function in vms-alpha.c in the Binary…
• CVE-2017-12456The read_symbol_stabs_debugging_info function in rddbg.c in …
• CVE-2017-12457The bfd_make_section_with_flags function in section.c in the…
• CVE-2017-12458The nlm_swap_auxiliary_headers_in function in bfd/nlmcode.h …
• CVE-2017-12459The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c i…