VYPR
High severity7.8NVD Advisory· Published Dec 4, 2017· Updated May 13, 2026

CVE-2017-17122

CVE-2017-17122

Description

The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which allows remote attackers to cause a denial of service (excessive memory allocation, or heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted PE file.

Affected products

1
  • cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.