---

CVE-2017-7227 - log back

CVE-2017-7227 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Local
Type	+ Denial of service
Description	+ GNU linker (ld) in GNU Binutils 2.28 is vulnerable to a heap-based buffer overflow while processing a bogus input script, leading to a program crash. This relates to lack of '\0' termination of a name field in ldlex.l.
References	+ https://sourceware.org/bugzilla/show_bug.cgi?id=20906
Notes	+ Looks like a mistake, it was already fixed in 2.28 by https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=406bd128dba2a59d0736839fc87a59bce319076c