CVE-2017-7227
HIGHGNU linker <2.28 - Buffer Overflow
Title source: llmDescription
GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
Scores
CVSS v3
7.5
EPSS
0.0044
EPSS Percentile
62.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-119
Status
draft
Affected Products (1)
gnu/binutils
Timeline
Published
Mar 22, 2017
Tracked Since
Feb 18, 2026