---

CVE-2017-9039 - log back

CVE-2017-9039 created at 25 Sep 2019 19:31:40
Severity	+ Medium
Remote	+ Local
Type	+ Denial of service
Description	+ GNU Binutils 2.28 allows attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.
References	+ https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=82156ab704b08b124d319c0decdbd48b3ca2dac5
Notes	+ Reproducer: https://github.com/asarubbo/poc/blob/master/00259-binutils-readelf-memallocfailure + Fixed: 2.29