Bug 1044867 – VUL-0: CVE-2017-9742: binutils: DoS in score_opcodes function in opcodes/score7-dis.c

Bug 1044867 - (CVE-2017-9742) VUL-0: CVE-2017-9742: binutils: DoS in score_opcodes function in opcodes/score7-dis.c

(CVE-2017-9742)
Summary:	VUL-0: CVE-2017-9742: binutils: DoS in score_opcodes function in opcodes/scor...

Status:	RESOLVED INVALID

Classification:	Novell Products
Product:	SUSE Security Incidents
Classification:	Novell Products
Component:	Incidents
Version:	unspecified
Hardware:	Other Other

Priority:	P5 - None Severity: Minor
Target Milestone:	---
Assigned To:	Michael Matz
QA Contact:	Security Team bot

URL:	https://smash.suse.de/issue/187036/
Whiteboard:	CVSSv3:SUSE:CVE-2017-9742:3.1:(AV:N/A...
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Create test case

Clone This Bug

Reported:	2017-06-19 07:54 UTC by Alexander Bergmann
Modified:	2018-06-15 14:37 UTC (History)
CC List:	2 users (show)

See Also:
Found By:	Security Response Team
Services Priority:
Business Priority:
Blocker:	---
Marketing QA Status:	---
IT Deployment:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Alexander Bergmann 2017-06-19 07:54:05 UTC

CVE-2017-9742

The score_opcodes function in opcodes/score7-dis.c in GNU Binutils 2.28 allows
remote attackers to cause a denial of service (buffer overflow and application
crash) or possibly have unspecified other impact via a crafted binary file, as
demonstrated by mishandling of this file during "objdump -D" execution.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-9742
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9742
https://sourceware.org/bugzilla/show_bug.cgi?id=21576

Comment 1 Alexander Bergmann 2017-06-19 07:55:49 UTC

Upstream Fix:
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=e64519d1ed7fd8f990f05a5562d5b5c0c44b7d7e

Comment 2 Alexander Bergmann 2017-06-19 08:01:00 UTC

The reproducer at https://sourceware.org/bugzilla/show_bug.cgi?id=21576 is not working on SLE or openSUSE systems.

#> objdump -D testcase.cve-2017-9742

testcase.cve-2017-9742:     file format elf32-little

objdump: can't disassemble for architecture UNKNOWN!

Comment 3 Richard Biener 2017-06-19 08:04:52 UTC

We do not enable the SCORE architecture in our binutils build.