Heap-based buffer overflow in Binutils - CVE-2017-17122

Vulnerability identifier: #VU37859

CSH Severity: Medium

CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2017-17122

CWE-ID: CWE-122

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in The dump_relocs_in_section function in objdump.c in GNU Binutils 2.29.1 does not check for reloc count integer overflows, which. A remote attacker can use a crafted PE file. to trigger heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Binutils
Gentoo Linux
Ubuntu
binutils (Ubuntu package)
binutils-multiarch (Ubuntu package)
VMware Tanzu Operations Manager
Isolation Segment
VMware Tanzu Application Service for VMs
Platform Automation Toolkit

Install update from vendor's website.

binutils (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.26.11ubuntu1~16.04.8+esm3
binutils-multiarch (Ubuntu package) - addressed in versions Ubuntu Pro (Infra-only), 2.26.11ubuntu1~16.04.8+esm3
VMware Tanzu Operations Manager - update to 2.10.65
Isolation Segment - addressed in versions 3.0.19, 4.0.11
VMware Tanzu Application Service for VMs - addressed in versions 3.0.19, 4.0.11
Platform Automation Toolkit - addressed in versions 4.0.13, 4.1.13, 4.2.8, 4.3.5

• https://security.gentoo.org/glsa/201811-17
• https://sourceware.org/bugzilla/show_bug.cgi?id=22508
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d785b7d4b877ed465d04072e17ca19d0f47d840f

• Multiple vulnerabilities in GNU Binutils
• Gentoo update for Binutils
• Ubuntu update for binutils
• VMware Tanzu products update for GNU binutils
• Ubuntu update for binutils