The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a denial of service (invalid memory access and application crash) or possibly have unspecified other impact via an ELF file that lacks section headers.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The load_debug_section function in readelf.c in GNU Binutils 2.29.1 allows remote attackers to cause a     denial of service (invalid memory access and application crash) or possibly have unspecified other impact     via an ELF file that lacks section headers. (CVE-2017-17126)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the crash package has been released.

The remote host is affected by the vulnerability described in GLSA-201811-17 (Binutils: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Binutils. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker, by enticing a user to compile/execute a specially       crafted ELF, object, PE, or binary file, could possibly cause a Denial of       Service condition or have other unspecified impacts.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
221059	Linux Distros Unpatched Vulnerability : CVE-2017-17126	Nessus	Misc.	high
203822	Photon OS 3.0: Crash PHSA-2023-3.0-0601	Nessus	PhotonOS Local Security Checks	critical
203529	Photon OS 4.0: Crash PHSA-2023-4.0-0414	Nessus	PhotonOS Local Security Checks	critical
119162	GLSA-201811-17 : Binutils: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2017-17126

high

Tenable Plugins

high

critical

critical

high