CVE-2017-6969

Critical

Published: 17/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

readelf in GNU Binutils 2.28 is vulnerable to heap-based buffer over-reads while processing corrupt RL78 binaries. This vulnerability can lead to program crashes and may also result in information leaks.

Risk Assessment

The organization may experience application crashes and potential leaks of sensitive data, which could impact system security.

Recommendation

It is recommended to update GNU Binutils to the latest version to mitigate this vulnerability and reduce the risks associated with processing corrupt files.

Original NVD description (English source)

readelf in GNU Binutils 2.28 is vulnerable to a heap-based buffer over-read while processing corrupt RL78 binaries. The vulnerability can trigger program crashes. It may lead to an information leak as well.