Search for vulnerabilities
Vulnerability details: VCID-q5b3-jn94-aaan
Vulnerability ID VCID-q5b3-jn94-aaan
Aliases CVE-2017-16829
Summary The _bfd_elf_parse_gnu_properties function in elf-properties.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, does not prevent negative pointers, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) or possibly have unspecified other impact via a crafted ELF file.
Status Published
Exploitability 0.5
Weighted Severity 7.0
Risk 3.5
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-125 Out-of-bounds Read
System Score Found at
generic_textual Low http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16829.html
cvssv3 3.3 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16829.json
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00427 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00440 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00440 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00440 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00440 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.00523 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
epss 0.01611 https://api.first.org/data/v1/epss?cve=CVE-2017-16829
rhbs low https://bugzilla.redhat.com/show_bug.cgi?id=1518592
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16829
cvssv2 2.1 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3 3.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv2 6.8 https://nvd.nist.gov/vuln/detail/CVE-2017-16829
cvssv3 7.8 https://nvd.nist.gov/vuln/detail/CVE-2017-16829
Reference id Reference type URL
http://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-16829.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16829.json
https://api.first.org/data/v1/epss?cve=CVE-2017-16829
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-16829
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://security.gentoo.org/glsa/201811-17
https://sourceware.org/bugzilla/show_bug.cgi?id=22307
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=cf54ebff3b7361989712fd9c0128a9b255578163
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=cf54ebff3b7361989712fd9c0128a9b255578163
1518592 https://bugzilla.redhat.com/show_bug.cgi?id=1518592
cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:gnu:binutils:2.29.1:*:*:*:*:*:*:*
CVE-2017-16829 https://nvd.nist.gov/vuln/detail/CVE-2017-16829
No exploits are available.
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-16829.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2017-16829
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2017-16829
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.74873
EPSS Score 0.00427
Published At Nov. 1, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.