CVE-2017-7614

Critical

Published: 09/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Binary File Descriptor (BFD) library in GNU Binutils 2.28 has an undefined behavior issue related to member access within a null pointer, which may lead to application crashes.

Risk Assessment

Remote attackers may cause denial of service by crashing the application, potentially affecting system availability.

Recommendation

It is recommended to upgrade to a newer version of GNU Binutils to mitigate this vulnerability.

Original NVD description (English source)

elflink.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, has a "member access within null pointer" undefined behavior issue, which might allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an "int main() {return 0;}" program.