CVE-2017-16832
Last modified
CVE-2017-16832 is a vulnerability of currently unknown severity. The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.. EPSS estimates a 1.79% chance of exploitation in the next 30 days.
Description
The pe_bfd_read_buildid function in peicode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not validate size and offset values in the data dictionary, which allows remote attackers to cause a denial of service (segmentation violation and application crash) or possibly have unspecified other impact via a crafted PE file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Binutils | 2.29.1 |
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=22373Exploit, Issue Tracking, Patch
- https://sourceware.org/bugzilla/show_bug.cgi?id=22373Exploit, Issue Tracking, Patch
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-16832?
How severe is CVE-2017-16832?
How do I fix CVE-2017-16832?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-16827The aout_get_external_symbols function in aoutx.h in the Bin…
- CVE-2017-16828The display_debug_frames function in dwarf.c in GNU Binutils…
- CVE-2017-16829The _bfd_elf_parse_gnu_properties function in elf-properties…
- CVE-2017-1683IBM Connections Engagement Center 6.0 is vulnerable to cross…
- CVE-2017-16830The print_gnu_property_note function in readelf.c in GNU Bin…
- CVE-2017-16831coffgen.c in the Binary File Descriptor (BFD) library (aka l…
- CVE-2017-16833Stored cross-site scripting (XSS) vulnerability in Gemirro b…6.1
- CVE-2017-16834PNP4Nagios through 0.6.26 has /usr/bin/npcd and npcd.cfg own…
- CVE-2017-16835The "Photo,Video Locker-Calculator" application 12.0 for And…
- CVE-2017-16836Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.…6.1
- CVE-2017-16837Certain function pointers in Trusted Boot (tboot) through 1.…
- CVE-2017-16839Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to …
Are you affected by CVE-2017-16832?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST