CVE-2017-12459 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-12459 Interim 1 37 2025-04-07T23:51:23Z current 2021-05-30T13:59:52Z 2025-04-07T23:51:23Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-12459 The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils binutils-devel binutils-devel-32bit binutils-gold libctf-nobfd0 libctf0 binutils as a component of SUSE CaaS Platform 4.5 binutils as a component of SUSE Enterprise Storage 7 binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libctf-nobfd0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libctf0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libctf-nobfd0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libctf0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 binutils as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils-devel-32bit as a component of SUSE Linux Enterprise Real Time 15 SP2 libctf-nobfd0 as a component of SUSE Linux Enterprise Real Time 15 SP2 libctf0 as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata binutils as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata binutils as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils-devel-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libctf0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 binutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 binutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils-devel-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libctf-nobfd0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libctf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils as a component of SUSE Manager Proxy 4.1 binutils as a component of SUSE Manager Retail Branch Server 4.1 binutils as a component of SUSE Manager Server 4.1 The bfd_mach_o_read_symtab_strtab function in bfd/mach-o.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted mach-o file. CVE-2017-12459 SUSE CaaS Platform 4.5:binutils SUSE Enterprise Storage 7:binutils SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libctf0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libctf0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libctf0 SUSE Linux Enterprise Module for Basesystem 15 SP3:binutils SUSE Linux Enterprise Module for Basesystem 15 SP3:binutils-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libctf-nobfd0 SUSE Linux Enterprise Module for Basesystem 15 SP3:libctf0 SUSE Linux Enterprise Module for Basesystem 15 SP4:binutils SUSE Linux Enterprise Module for Basesystem 15 SP4:binutils-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libctf-nobfd0 SUSE Linux Enterprise Module for Basesystem 15 SP4:libctf0 SUSE Linux Enterprise Module for Development Tools 15 SP3:binutils SUSE Linux Enterprise Module for Development Tools 15 SP3:binutils-devel-32bit SUSE Linux Enterprise Module for Development Tools 15 SP4:binutils SUSE Linux Enterprise Module for Development Tools 15 SP4:binutils-devel-32bit SUSE Linux Enterprise Module for Package Hub 15 SP1:binutils SUSE Linux Enterprise Module for Package Hub 15 SP1:binutils-gold SUSE Linux Enterprise Module for Package Hub 15 SP3:binutils SUSE Linux Enterprise Module for Package Hub 15 SP3:binutils-gold SUSE Linux Enterprise Module for Package Hub 15 SP4:binutils SUSE Linux Enterprise Module for Package Hub 15 SP4:binutils-gold SUSE Linux Enterprise Real Time 15 SP2:binutils SUSE Linux Enterprise Real Time 15 SP2:binutils-devel SUSE Linux Enterprise Real Time 15 SP2:binutils-devel-32bit SUSE Linux Enterprise Real Time 15 SP2:libctf-nobfd0 SUSE Linux Enterprise Real Time 15 SP2:libctf0 SUSE Linux Enterprise Server 11 SP1 for Teradata:binutils SUSE Linux Enterprise Server 11 SP3 for Teradata:binutils SUSE Linux Enterprise Server 15 SP2-LTSS:binutils SUSE Linux Enterprise Server 15 SP2-LTSS:binutils-devel SUSE Linux Enterprise Server 15 SP2-LTSS:binutils-devel-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:libctf-nobfd0 SUSE Linux Enterprise Server 15 SP2-LTSS:libctf0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:binutils SUSE Linux Enterprise Server Business Critical Linux 15 SP2:binutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils-devel-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP2:libctf-nobfd0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libctf0 SUSE Manager Proxy 4.1:binutils SUSE Manager Retail Branch Server 4.1:binutils SUSE Manager Server 4.1:binutils moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P 5.9 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L