CVE-2017-15024

find_abstract_instance_name in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

• CWE-835

• https://blogs.gentoo.org/ago/2017/10/03/binutils-infinite-loop-in-find_abstract_instance_name-dwarf2-c/Patch, Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22187Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52a93b95ec0771c97e26f0bb28630a271a667bd2
• https://blogs.gentoo.org/ago/2017/10/03/binutils-infinite-loop-in-find_abstract_instance_name-dwarf2-c/Patch, Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22187Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=52a93b95ec0771c97e26f0bb28630a271a667bd2

Published

Oct 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15019LAME 3.99.5 has a NULL Pointer Dereference in the hip_decode…
• CVE-2017-1502IBM Content Navigator & CMIS 2.0.3, 3.0.0, and 3.0.1 is vuln…
• CVE-2017-15020dwarf1.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15021bfd_get_debug_link_info_1 in opncls.c in the Binary File Des…
• CVE-2017-15022dwarf2.c in the Binary File Descriptor (BFD) library (aka li…
• CVE-2017-15023read_formatted_entries in dwarf2.c in the Binary File Descri…
• CVE-2017-15025decode_line_info in dwarf2.c in the Binary File Descriptor (…
• CVE-2017-15029Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected…
• CVE-2017-1503IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is v…
• CVE-2017-15030Open-Xchange GmbH OX App Suite 7.8.4 and earlier is affected…
• CVE-2017-15031In all versions of ARM Trusted Firmware up to and including …7.5
• CVE-2017-15032ImageMagick version 7.0.7-2 contains a memory leak in ReadYC…