CVE-2017-9041 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	No
Type	Denial of service
Description	GNU Binutils 2.28 allows attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted ELF file, related to MIPS GOT mishandling in the process_mips_specific function in readelf.c.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-276	binutils	2.28.0-4	2.29.0-1	High	Fixed

References
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3

References

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=75ec1fdbb797a389e4fe4aaf2e15358a070dcc19
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;a=commitdiff;h=c4ab9505b53cdc899506ed421fddb7e1f8faf7a3

Notes
Reproducer: https://github.com/asarubbo/poc/blob/master/00258-binutils-readelf-heapoverflow2-byte_get_little_endian Fixed: 2.29