CVE-2019-17450

find_abstract_instance in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32, allows remote attackers to cause a denial of service (infinite recursion and application crash) via a crafted ELF file.

• CWE-674

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-39Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191024-0002/Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=25078Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4336-1/Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00078.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00004.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202007-39Third Party Advisory
• https://security.netapp.com/advisory/ntap-20191024-0002/Third Party Advisory
• https://sourceware.org/bugzilla/show_bug.cgi?id=25078Exploit, Issue Tracking, Third Party Advisory
• https://usn.ubuntu.com/4336-1/Third Party Advisory

Published

Oct 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17443Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-17444Jfrog Artifactory uses default passwords (such as "password"…9.8
• CVE-2019-17445An issue was discovered in Eracent EDA, EPA, EPM, EUA, FLW, …5.5
• CVE-2019-17446An issue was discovered in Eracent EPA Agent through 10.2.26…7.8
• CVE-2019-17449Avira Software Updater before 2.0.6.21094 allows a DLL side-…6.7
• CVE-2019-1745A vulnerability in Cisco IOS XE Software could allow an auth…7.8
• CVE-2019-17451An issue was discovered in the Binary File Descriptor (BFD) …6.5
• CVE-2019-17452Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descrip…6.5
• CVE-2019-17453Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descrip…6.5
• CVE-2019-17454Bento4 1.5.1.0 has a NULL pointer dereference in AP4_Descrip…6.5
• CVE-2019-17455Libntlm through 1.5 relies on a fixed buffer size for tSmbNt…9.8
• CVE-2019-1746A vulnerability in the Cluster Management Protocol (CMP) pro…7.4