CVE-2017-13716
MEDIUMGNU Binutils - Resource Allocation Without Limits
Title source: ruleDescription
The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
Scores
CVSS v3
5.5
EPSS
0.0024
EPSS Percentile
46.5%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-770
Status
draft
Affected Products (1)
gnu/binutils
Timeline
Published
Aug 28, 2017
Tracked Since
Feb 18, 2026