CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-08-28

Last modified

2024-09-16

Weaknesses

CWE-770

Affected products

• Binutils (Gnu)

References

• https://sourceware.org/bugzilla/show_bug.cgi?id=22009