CVE-2017-17124
Last modified
CVE-2017-17124 is a vulnerability of currently unknown severity. The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.. EPSS estimates a 1.84% chance of exploitation in the next 30 days.
Description
The _bfd_coff_read_string_table function in coffgen.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not properly validate the size of the external string table, which allows remote attackers to cause a denial of service (excessive memory consumption, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted COFF binary.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Binutils | 2.29.1 |
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=22507Exploit, Issue Tracking
- https://sourceware.org/bugzilla/show_bug.cgi?id=22507Exploit, Issue Tracking
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-17124?
How severe is CVE-2017-17124?
How do I fix CVE-2017-17124?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-17113ntguard_x64.sys 0.18780.0.0 in IKARUS anti.virus 2.16.15 has…
- CVE-2017-17114ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.v…
- CVE-2017-1712"A vulnerability in the TLS protocol implementation of the D…5.9
- CVE-2017-17121The Binary File Descriptor (BFD) library (aka libbfd), as di…
- CVE-2017-17122The dump_relocs_in_section function in objdump.c in GNU Binu…
- CVE-2017-17123The coff_slurp_reloc_table function in coffcode.h in the Bin…
- CVE-2017-17125nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain …
- CVE-2017-17126The load_debug_section function in readelf.c in GNU Binutils…
- CVE-2017-17127The vc1_decode_frame function in libavcodec/vc1dec.c in Liba…
- CVE-2017-17128The h264_slice_init function in libavcodec/h264_slice.c in L…
- CVE-2017-17129The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in…
- CVE-2017-1713IBM InfoSphere Streams 4.2.1 uses weaker than expected crypt…5.9
Are you affected by CVE-2017-17124?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST