Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2017-12448

The bfd_cache_close function in bfd/cache.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause a heap use after free and possibly achieve code execution via a crafted nested archive file. This issue occurs because incorrect functions are called during an attempt to release memory. The issue can be addressed by better input validation in the bfd_generic_archive_p function in bfd/archive.c.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.014
EPSS Ranking 79.5%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2017-12448
  • Gnu » Binutils » Version: N/A
    cpe:2.3:a:gnu:binutils:-
  • Gnu » Binutils » Version: 2.10
    cpe:2.3:a:gnu:binutils:2.10
  • Gnu » Binutils » Version: 2.10.1
    cpe:2.3:a:gnu:binutils:2.10.1
  • Gnu » Binutils » Version: 2.10.1a
    cpe:2.3:a:gnu:binutils:2.10.1a
  • Gnu » Binutils » Version: 2.11
    cpe:2.3:a:gnu:binutils:2.11
  • Gnu » Binutils » Version: 2.11.1
    cpe:2.3:a:gnu:binutils:2.11.1
  • Gnu » Binutils » Version: 2.11.2
    cpe:2.3:a:gnu:binutils:2.11.2
  • Gnu » Binutils » Version: 2.11.2a
    cpe:2.3:a:gnu:binutils:2.11.2a
  • Gnu » Binutils » Version: 2.12
    cpe:2.3:a:gnu:binutils:2.12
  • Gnu » Binutils » Version: 2.12.1
    cpe:2.3:a:gnu:binutils:2.12.1
  • Gnu » Binutils » Version: 2.12.1a
    cpe:2.3:a:gnu:binutils:2.12.1a
  • Gnu » Binutils » Version: 2.13
    cpe:2.3:a:gnu:binutils:2.13
  • Gnu » Binutils » Version: 2.13.1
    cpe:2.3:a:gnu:binutils:2.13.1
  • Gnu » Binutils » Version: 2.13.2
    cpe:2.3:a:gnu:binutils:2.13.2
  • Gnu » Binutils » Version: 2.13.2.1
    cpe:2.3:a:gnu:binutils:2.13.2.1
  • Gnu » Binutils » Version: 2.13.2.1a
    cpe:2.3:a:gnu:binutils:2.13.2.1a
  • Gnu » Binutils » Version: 2.14
    cpe:2.3:a:gnu:binutils:2.14
  • Gnu » Binutils » Version: 2.14a
    cpe:2.3:a:gnu:binutils:2.14a
  • Gnu » Binutils » Version: 2.15
    cpe:2.3:a:gnu:binutils:2.15
  • Gnu » Binutils » Version: 2.15a
    cpe:2.3:a:gnu:binutils:2.15a
  • Gnu » Binutils » Version: 2.16.1
    cpe:2.3:a:gnu:binutils:2.16.1
  • Gnu » Binutils » Version: 2.16.1a
    cpe:2.3:a:gnu:binutils:2.16.1a
  • Gnu » Binutils » Version: 2.17
    cpe:2.3:a:gnu:binutils:2.17
  • Gnu » Binutils » Version: 2.17a
    cpe:2.3:a:gnu:binutils:2.17a
  • Gnu » Binutils » Version: 2.18
    cpe:2.3:a:gnu:binutils:2.18
  • Gnu » Binutils » Version: 2.18a
    cpe:2.3:a:gnu:binutils:2.18a
  • Gnu » Binutils » Version: 2.19
    cpe:2.3:a:gnu:binutils:2.19
  • Gnu » Binutils » Version: 2.19.1
    cpe:2.3:a:gnu:binutils:2.19.1
  • Gnu » Binutils » Version: 2.19.1a
    cpe:2.3:a:gnu:binutils:2.19.1a
  • Gnu » Binutils » Version: 2.20
    cpe:2.3:a:gnu:binutils:2.20
  • Gnu » Binutils » Version: 2.20.1
    cpe:2.3:a:gnu:binutils:2.20.1
  • Gnu » Binutils » Version: 2.20.1a
    cpe:2.3:a:gnu:binutils:2.20.1a
  • Gnu » Binutils » Version: 2.21.1
    cpe:2.3:a:gnu:binutils:2.21.1
  • Gnu » Binutils » Version: 2.21.1a
    cpe:2.3:a:gnu:binutils:2.21.1a
  • Gnu » Binutils » Version: 2.22
    cpe:2.3:a:gnu:binutils:2.22
  • Gnu » Binutils » Version: 2.23
    cpe:2.3:a:gnu:binutils:2.23
  • Gnu » Binutils » Version: 2.23.1
    cpe:2.3:a:gnu:binutils:2.23.1
  • Gnu » Binutils » Version: 2.23.2
    cpe:2.3:a:gnu:binutils:2.23.2
  • Gnu » Binutils » Version: 2.24
    cpe:2.3:a:gnu:binutils:2.24
  • Gnu » Binutils » Version: 2.25
    cpe:2.3:a:gnu:binutils:2.25
  • Gnu » Binutils » Version: 2.25.1
    cpe:2.3:a:gnu:binutils:2.25.1
  • Gnu » Binutils » Version: 2.26
    cpe:2.3:a:gnu:binutils:2.26
  • Gnu » Binutils » Version: 2.26.1
    cpe:2.3:a:gnu:binutils:2.26.1
  • Gnu » Binutils » Version: 2.27
    cpe:2.3:a:gnu:binutils:2.27
  • Gnu » Binutils » Version: 2.28
    cpe:2.3:a:gnu:binutils:2.28
  • Gnu » Binutils » Version: 2.28.1
    cpe:2.3:a:gnu:binutils:2.28.1
  • Gnu » Binutils » Version: 2.29
    cpe:2.3:a:gnu:binutils:2.29
  • Gnu » Binutils » Version: 2.6
    cpe:2.3:a:gnu:binutils:2.6
  • Gnu » Binutils » Version: 2.7
    cpe:2.3:a:gnu:binutils:2.7
  • Gnu » Binutils » Version: 2.8
    cpe:2.3:a:gnu:binutils:2.8
  • Gnu » Binutils » Version: 2.8.1
    cpe:2.3:a:gnu:binutils:2.8.1
  • Gnu » Binutils » Version: 2.9
    cpe:2.3:a:gnu:binutils:2.9
  • Gnu » Binutils » Version: 2.9.1
    cpe:2.3:a:gnu:binutils:2.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved