VYPR
High severity7.8NVD Advisory· Published Dec 4, 2017· Updated Jun 17, 2026

CVE-2017-17122

CVE-2017-17122

Description

The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • GNU/Binutils2 versions
    cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*
    • (no CPE)range: =2.29.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.