CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12449

The _bfd_vms_save_sized_string function in vms-misc.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted vms file.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.3%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.8

References

Products affected by CVE-2017-12449

Gnu » Binutils » Version: N/A

cpe:2.3:a:gnu:binutils:-
Gnu » Binutils » Version: 2.10

cpe:2.3:a:gnu:binutils:2.10
Gnu » Binutils » Version: 2.10.1

cpe:2.3:a:gnu:binutils:2.10.1
Gnu » Binutils » Version: 2.10.1a

cpe:2.3:a:gnu:binutils:2.10.1a
Gnu » Binutils » Version: 2.11

cpe:2.3:a:gnu:binutils:2.11
Gnu » Binutils » Version: 2.11.1

cpe:2.3:a:gnu:binutils:2.11.1
Gnu » Binutils » Version: 2.11.2

cpe:2.3:a:gnu:binutils:2.11.2
Gnu » Binutils » Version: 2.11.2a

cpe:2.3:a:gnu:binutils:2.11.2a
Gnu » Binutils » Version: 2.12

cpe:2.3:a:gnu:binutils:2.12
Gnu » Binutils » Version: 2.12.1

cpe:2.3:a:gnu:binutils:2.12.1
Gnu » Binutils » Version: 2.12.1a

cpe:2.3:a:gnu:binutils:2.12.1a
Gnu » Binutils » Version: 2.13

cpe:2.3:a:gnu:binutils:2.13
Gnu » Binutils » Version: 2.13.1

cpe:2.3:a:gnu:binutils:2.13.1
Gnu » Binutils » Version: 2.13.2

cpe:2.3:a:gnu:binutils:2.13.2
Gnu » Binutils » Version: 2.13.2.1

cpe:2.3:a:gnu:binutils:2.13.2.1
Gnu » Binutils » Version: 2.13.2.1a

cpe:2.3:a:gnu:binutils:2.13.2.1a
Gnu » Binutils » Version: 2.14

cpe:2.3:a:gnu:binutils:2.14
Gnu » Binutils » Version: 2.14a

cpe:2.3:a:gnu:binutils:2.14a
Gnu » Binutils » Version: 2.15

cpe:2.3:a:gnu:binutils:2.15
Gnu » Binutils » Version: 2.15a

cpe:2.3:a:gnu:binutils:2.15a
Gnu » Binutils » Version: 2.16.1

cpe:2.3:a:gnu:binutils:2.16.1
Gnu » Binutils » Version: 2.16.1a

cpe:2.3:a:gnu:binutils:2.16.1a
Gnu » Binutils » Version: 2.17

cpe:2.3:a:gnu:binutils:2.17
Gnu » Binutils » Version: 2.17a

cpe:2.3:a:gnu:binutils:2.17a
Gnu » Binutils » Version: 2.18

cpe:2.3:a:gnu:binutils:2.18
Gnu » Binutils » Version: 2.18a

cpe:2.3:a:gnu:binutils:2.18a
Gnu » Binutils » Version: 2.19

cpe:2.3:a:gnu:binutils:2.19
Gnu » Binutils » Version: 2.19.1

cpe:2.3:a:gnu:binutils:2.19.1
Gnu » Binutils » Version: 2.19.1a

cpe:2.3:a:gnu:binutils:2.19.1a
Gnu » Binutils » Version: 2.20

cpe:2.3:a:gnu:binutils:2.20
Gnu » Binutils » Version: 2.20.1

cpe:2.3:a:gnu:binutils:2.20.1
Gnu » Binutils » Version: 2.20.1a

cpe:2.3:a:gnu:binutils:2.20.1a
Gnu » Binutils » Version: 2.21.1

cpe:2.3:a:gnu:binutils:2.21.1
Gnu » Binutils » Version: 2.21.1a

cpe:2.3:a:gnu:binutils:2.21.1a
Gnu » Binutils » Version: 2.22

cpe:2.3:a:gnu:binutils:2.22
Gnu » Binutils » Version: 2.23

cpe:2.3:a:gnu:binutils:2.23
Gnu » Binutils » Version: 2.23.1

cpe:2.3:a:gnu:binutils:2.23.1
Gnu » Binutils » Version: 2.23.2

cpe:2.3:a:gnu:binutils:2.23.2
Gnu » Binutils » Version: 2.24

cpe:2.3:a:gnu:binutils:2.24
Gnu » Binutils » Version: 2.25

cpe:2.3:a:gnu:binutils:2.25
Gnu » Binutils » Version: 2.25.1

cpe:2.3:a:gnu:binutils:2.25.1
Gnu » Binutils » Version: 2.26

cpe:2.3:a:gnu:binutils:2.26
Gnu » Binutils » Version: 2.26.1

cpe:2.3:a:gnu:binutils:2.26.1
Gnu » Binutils » Version: 2.27

cpe:2.3:a:gnu:binutils:2.27
Gnu » Binutils » Version: 2.28

cpe:2.3:a:gnu:binutils:2.28
Gnu » Binutils » Version: 2.28.1

cpe:2.3:a:gnu:binutils:2.28.1
Gnu » Binutils » Version: 2.29

cpe:2.3:a:gnu:binutils:2.29
Gnu » Binutils » Version: 2.6

cpe:2.3:a:gnu:binutils:2.6
Gnu » Binutils » Version: 2.7

cpe:2.3:a:gnu:binutils:2.7
Gnu » Binutils » Version: 2.8

cpe:2.3:a:gnu:binutils:2.8
Gnu » Binutils » Version: 2.8.1

cpe:2.3:a:gnu:binutils:2.8.1
Gnu » Binutils » Version: 2.9

cpe:2.3:a:gnu:binutils:2.9
Gnu » Binutils » Version: 2.9.1

cpe:2.3:a:gnu:binutils:2.9.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-12449

Products

Pricing

Contact Us