CVE-2017-9039

Source
Severity Medium
Remote No
Type Denial of service
Description
GNU Binutils 2.28 allows attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.
Group Package Affected Fixed Severity Status Ticket
AVG-276 binutils 2.28.0-4 2.29.0-1 High Fixed
References
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=82156ab704b08b124d319c0decdbd48b3ca2dac5
Notes
Reproducer: https://github.com/asarubbo/poc/blob/master/00259-binutils-readelf-memallocfailure
Fixed: 2.29