CVE-2017-15020 log

Source
Severity Medium
Remote Yes
Type Arbitrary code execution
Description 
dwarf1.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles pointers, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted ELF file, related to parse_die and parse_line_table, as demonstrated by a parse_die heap-based buffer over-read.
Group Package Affected Fixed Severity Status Ticket
AVG-435 binutils 2.29.1-3 2.30-1 High Fixed
References 
https://blogs.gentoo.org/ago/2017/10/03/binutils-heap-based-buffer-overflow-in-parse_die-dwarf1-c/
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=1da5c9a485f3dcac4c45e96ef4b7dae5948314b5
https://sourceware.org/bugzilla/show_bug.cgi?id=22202