CVE-2017-7614
Last modified
CVE-2017-7614 is a vulnerability of currently unknown severity. elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.. EPSS estimates a 3.76% chance of exploitation in the next 30 days.
Description
elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gnu | Binutils | 2.28 |
References
- https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/Exploit, Patch, Third Party Advisory
- https://blogs.gentoo.org/ago/2017/04/05/binutils-two-null-pointer-dereference-in-elflink-c/Exploit, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7614?
How severe is CVE-2017-7614?
How do I fix CVE-2017-7614?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-7608The ebl_object_note_type_name function in eblobjnotetypename…
- CVE-2017-7609elf_compress.c in elfutils 0.168 does not validate the zlib …
- CVE-2017-7610The check_group function in elflint.c in elfutils 0.168 allo…
- CVE-2017-7611The check_symtab_shndx function in elflint.c in elfutils 0.1…
- CVE-2017-7612The check_sysv_hash function in elflint.c in elfutils 0.168 …
- CVE-2017-7613elflint.c in elfutils 0.168 does not validate the number of …
- CVE-2017-7615MantisBT through 2.3.0 allows arbitrary password reset and u…8.8
- CVE-2017-7616Incorrect error handling in the set_mempolicy and mbind comp…
- CVE-2017-7617Remote code execution can occur in Asterisk Open Source 13.x…
- CVE-2017-7618crypto/ahash.c in the Linux kernel through 4.10.9 allows att…7.5
- CVE-2017-7619In ImageMagick 7.0.4-9, an infinite loop can occur because o…
- CVE-2017-7620MantisBT before 1.3.11, 2.x before 2.3.3, and 2.4.x before 2…
Are you affected by CVE-2017-7614?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST