CVE-2017-13716

Description

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

References

https://sourceware.org/bugzilla/show_bug.cgi?id=22009

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3