The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows
    remote attackers to cause a denial of service (excessive memory allocation and application crash) via a
    crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
    (CVE-2017-13716)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows     remote attackers to cause a denial of service (excessive memory allocation and application crash) via a     crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).
    (CVE-2017-13716)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the crash package has been released.

An update of the binutils package has been released.

ID	Name	Product	Family	Type	Severity
458789	Echo: binutils: security update to 2.44binutils-gold: security update to 2.44-2+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
458789	Echo: binutils: security update to 2.44binutils-gold: security update to 2.44-2+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
220568	Linux Distros Unpatched Vulnerability : CVE-2017-13716	Nessus	Misc.	Local	medium
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	Local	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	Local	critical
121805	Photon OS 1.0: Binutils PHSA-2018-1.0-0104	Nessus	PhotonOS Local Security Checks	Local	medium

Detections

Analytics

CVE-2017-13716

medium

Tenable Plugins

medium

medium

medium

critical

critical

medium