The getsym function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a malformed tekhex binary. Upstream bug: https://sourceware.org/bugzilla/show_bug.cgi?id=21962 Upstream patch: https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=ebe412a7186f1acbc5753d3236f3cab4999f7b90 References: https://bugzilla.novell.com/show_bug.cgi?id=1054665
Created binutils tracking bugs for this issue: Affects: fedora-all [bug 1484527] Created mingw-binutils tracking bugs for this issue: Affects: epel-all [bug 1484528]