[ GLSA 201709-02 ] Binutils

[GLSA]

Gentoo Linux Security Advisory

Title: Binutils: Multiple vulnerabilities (GLSA 201709-02)
Severity: normal
Exploitable: remote
Date: 2017-09-17
Bug(s): #618006, #618514, #618516, #618520, #618826, #621130, #624524, #624702
ID: 201709-02

Synopsis

Multiple vulnerabilities have been found in Binutils, the worst of
which may allow remote attackers to cause a Denial of Service condition.


Background

The GNU Binutils are a collection of tools to create, modify and analyse
binary files. Many of the files use BFD, the Binary File Descriptor
library, to do low-level manipulation.


Affected Packages

Package: sys-devel/binutils
Vulnerable: < 2.28.1
Unaffected: >= 2.28.1
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Binutils. Please review
References for additional information.


Impact

A remote attacker, by enticing a user to compile/execute a specially
crafted ELF file, PE File, or binary file, could possibly cause a Denial
of Service condition.


Workaround

There is no known workaround at this time.

Resolution

All Binutils users should upgrade to the latest version: