VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Aug 28, 2017· Updated Jun 17, 2026

CVE-2017-13716

CVE-2017-13716

Description

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

Affected products

3
  • GNU/Binutils2 versions
    cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnu:binutils:2.29:*:*:*:*:*:*:*
    • (no CPE)range: <=2.29
  • GNU/Libibertyllm-fuzzy
    Range: <=2.29

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.