CVE-2017-17125

nm.c and objdump.c in GNU Binutils 2.29.1 mishandle certain global symbols, which allows remote attackers to cause a denial of service (_bfd_elf_get_symbol_version_string buffer over-read and application crash) or possibly have unspecified other impact via a crafted ELF file.

• CWE-125

• https://security.gentoo.org/glsa/201811-17Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22443Exploit, Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=160b1a618ad94988410dc81fce9189fcda5b7ff4
• https://security.gentoo.org/glsa/201811-17Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=22443Exploit, Issue Tracking, Patch, Third Party Advisory
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=160b1a618ad94988410dc81fce9189fcda5b7ff4

Published

Dec 4, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17114ntguard.sys and ntguard_x64.sys 0.18780.0.0 in IKARUS anti.v…
• CVE-2017-1712"A vulnerability in the TLS protocol implementation of the D…5.9
• CVE-2017-17121The Binary File Descriptor (BFD) library (aka libbfd), as di…
• CVE-2017-17122The dump_relocs_in_section function in objdump.c in GNU Binu…
• CVE-2017-17123The coff_slurp_reloc_table function in coffcode.h in the Bin…
• CVE-2017-17124The _bfd_coff_read_string_table function in coffgen.c in the…
• CVE-2017-17126The load_debug_section function in readelf.c in GNU Binutils…
• CVE-2017-17127The vc1_decode_frame function in libavcodec/vc1dec.c in Liba…
• CVE-2017-17128The h264_slice_init function in libavcodec/h264_slice.c in L…
• CVE-2017-17129The ff_vc1_mc_4mv_chroma4 function in libavcodec/vc1_mc.c in…
• CVE-2017-1713IBM InfoSphere Streams 4.2.1 uses weaker than expected crypt…5.9
• CVE-2017-17130The ff_free_picture_tables function in libavcodec/mpegpictur…