CVE-2017-7227 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	No
Type	Denial of service
Description	GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-937	binutils	2.27.0-1	2.28.0-1	Medium	Fixed

References
https://sourceware.org/bugzilla/show_bug.cgi?id=20906

Notes
Looks like a mistake, it was already fixed in 2.28 by https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=406bd128dba2a59d0736839fc87a59bce319076c