CVE-2017-8398

dwarf.c in GNU Binutils 2.28 is vulnerable to an invalid read of size 1 during dumping of debug information from a corrupt binary. This vulnerability causes programs that conduct an analysis of binary programs, such as objdump and readelf, to crash.

References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type

GIT

Repo

https://sourceware.org/git/binutils-gdb.git

Events

Introduced

7fa393306ed8b93019d225548474c0540b8928f7

Last Affected

7fa393306ed8b93019d225548474c0540b8928f7

Database specific

Show details

{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:gnu:binutils:2.28:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "2.28"
                },
                {
                    "last_affected":  "2.28"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

2.*

2.28

Other

binutils-2_28

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8398.json"