CVE-2017-7227

Source
Severity Medium
Remote No
Type Denial of service
Description
GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
References
https://sourceware.org/bugzilla/show_bug.cgi?id=20906
Notes
Looks like a mistake, it was already fixed in 2.28 by https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=406bd128dba2a59d0736839fc87a59bce319076c