CVE-2017-13710

HIGH

GNU Binutils - NULL Pointer Dereference

Title source: rule

Description

The setup_group function in elf.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a group section that is too small.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0059
EPSS Percentile 68.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-476
Status draft

Affected Products (1)

gnu/binutils

Timeline

Published Aug 27, 2017
Tracked Since Feb 18, 2026