Red Hat Bugzilla – Bug 1449552
CVE-2017-8397 binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses
Last modified: 2017-05-11 03:44:34 EDT
The Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils is vulnerable to an invalid read of size 1 and an invalid write of size 1 during processing of a corrupt binary containing reloc(s) with negative addresses. This vulnerability causes programs that conduct an analysis of binary programs using the libbfd library, such as objdump, to crash. Upstream issue: https://sourceware.org/bugzilla/show_bug.cgi?id=21434