CVE-2017-6966

readelf in GNU Binutils 2.28 has a use-after-free (specifically read-after-free) error while processing multiple, relocated sections in an MSP430 binary. This is caused by mishandling of an invalid symbol index, and mishandling of state across invocations.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-03-17

Last modified

2024-08-05

Weaknesses

CWE-416

Affected products

• Binutils (Gnu)

References

• https://security.gentoo.org/glsa/201709-02
• https://sourceware.org/bugzilla/show_bug.cgi?id=21139