CVE-2017-7224

Source
Severity Medium
Remote No
Type Denial of service
Description
The find_nearest_line function in objdump in GNU Binutils 2.28 is vulnerable to an invalid write (of size 1) while disassembling a corrupt binary that contains an empty function name, leading to a program crash.
References
https://sourceware.org/bugzilla/show_bug.cgi?id=20892
Notes
Already fixed in 2.27 by https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e82ab856bb4689330c29fb9f1c57a8555b26380e