read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as     distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote     attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF     file, related to concat_filename. (CVE-2017-15023)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the crash package has been released.

An update of the binutils package has been released.

An update of 'binutils' packages of Photon OS has been released.

The remote host is affected by the vulnerability described in GLSA-201801-01 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker, by enticing a user to compile/execute a specially       crafted ELF, tekhex, PE, or binary file, could possibly cause a Denial of       Service condition.
  Workaround :

    There are no known workarounds at this time.

ID	Name	Product	Family	Severity
220654	Linux Distros Unpatched Vulnerability : CVE-2017-15023	Nessus	Misc.	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	critical
121805	Photon OS 1.0: Binutils PHSA-2018-1.0-0104	Nessus	PhotonOS Local Security Checks	medium
111916	Photon OS 1.0: Binutils PHSA-2018-1.0-0104 (deprecated)	Nessus	PhotonOS Local Security Checks	medium
105627	GLSA-201801-01 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2017-15023

medium

Tenable Plugins

medium

critical

critical

medium

medium

high