CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.5. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2017-15939
Severity
MEDIUM
CVSS
5.5
EPSS
1.71%
Original NVD Description
dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles NULL files in a .debug_line file table, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. NOTE: this issue is caused by an incomplete fix for CVE-2017-15023.
Related CVEs
Other vulnerabilities affecting the same vendor(s)