CVE-2017-15023 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-15023 Interim 1 23 2025-04-07T23:51:16Z current 2021-05-30T14:02:44Z 2025-04-07T23:51:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-15023 read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 binutils binutils-devel binutils-devel-32bit binutils-gold libctf-nobfd0 libctf0 binutils as a component of Magnum Orchestration 7 binutils as a component of SUSE Linux Enterprise Desktop 11 SP1 binutils as a component of SUSE Linux Enterprise Desktop 11 SP2 binutils as a component of SUSE Linux Enterprise Desktop 11 SP3 binutils as a component of SUSE Linux Enterprise Desktop 11 SP4 binutils as a component of SUSE Linux Enterprise Desktop 12 SP3 binutils as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 binutils as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata binutils as a component of SUSE Linux Enterprise Server 11 SP3 LTSS binutils as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata binutils as a component of SUSE Linux Enterprise Server 11 SP4 LTSS binutils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS binutils as a component of SUSE Linux Enterprise Server 12 SP1-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 12 SP1-LTSS binutils as a component of SUSE Linux Enterprise Server 12 SP2 binutils as a component of SUSE Linux Enterprise Server 12 SP2-BCL binutils-devel as a component of SUSE Linux Enterprise Server 12 SP2-BCL libctf-nobfd0 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libctf0 as a component of SUSE Linux Enterprise Server 12 SP2-BCL binutils as a component of SUSE Linux Enterprise Server 12 SP2-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS binutils as a component of SUSE Linux Enterprise Server 12 SP3 binutils as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS binutils-devel as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libctf-nobfd0 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libctf0 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS binutils as a component of SUSE Linux Enterprise Server 12 SP4-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libctf0 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS binutils as a component of SUSE Linux Enterprise Server 12 SP5 binutils-devel as a component of SUSE Linux Enterprise Server 12 SP5 libctf-nobfd0 as a component of SUSE Linux Enterprise Server 12 SP5 libctf0 as a component of SUSE Linux Enterprise Server 12 SP5 binutils as a component of SUSE Linux Enterprise Server 12-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 12-LTSS binutils as a component of SUSE Linux Enterprise Server 15-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 15-LTSS binutils-devel-32bit as a component of SUSE Linux Enterprise Server 15-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise Server 15-LTSS libctf0 as a component of SUSE Linux Enterprise Server 15-LTSS binutils as a component of SUSE Linux Enterprise Server Teradata 12 SP3 binutils as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS binutils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 binutils-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 binutils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 binutils-devel as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libctf-nobfd0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libctf0 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 binutils as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 binutils-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils-gold as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 binutils-gold as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 binutils as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 binutils-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 binutils-gold as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 binutils as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 binutils-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 binutils-gold as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 binutils as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 binutils as a component of SUSE OpenStack Cloud 9 binutils-devel as a component of SUSE OpenStack Cloud 9 libctf-nobfd0 as a component of SUSE OpenStack Cloud 9 libctf0 as a component of SUSE OpenStack Cloud 9 binutils as a component of SUSE OpenStack Cloud Crowbar 9 binutils-devel as a component of SUSE OpenStack Cloud Crowbar 9 libctf-nobfd0 as a component of SUSE OpenStack Cloud Crowbar 9 libctf0 as a component of SUSE OpenStack Cloud Crowbar 9 read_formatted_entries in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, does not properly validate the format count, which allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ELF file, related to concat_filename. CVE-2017-15023 Magnum Orchestration 7:binutils SUSE Linux Enterprise Desktop 11 SP1:binutils SUSE Linux Enterprise Desktop 11 SP2:binutils SUSE Linux Enterprise Desktop 11 SP3:binutils SUSE Linux Enterprise Desktop 11 SP4:binutils SUSE Linux Enterprise Desktop 12 SP3:binutils SUSE Linux Enterprise High Performance Computing 12 SP5:binutils SUSE Linux Enterprise Server 11 SP1 for Teradata:binutils SUSE Linux Enterprise Server 11 SP3 LTSS:binutils SUSE Linux Enterprise Server 11 SP3 for Teradata:binutils SUSE Linux Enterprise Server 11 SP4 LTSS:binutils SUSE Linux Enterprise Server 11 SP4-LTSS:binutils SUSE Linux Enterprise Server 12 SP1-LTSS:binutils SUSE Linux Enterprise Server 12 SP1-LTSS:binutils-devel SUSE Linux Enterprise Server 12 SP2-BCL:binutils SUSE Linux Enterprise Server 12 SP2-BCL:binutils-devel SUSE Linux Enterprise Server 12 SP2-BCL:libctf-nobfd0 SUSE Linux Enterprise Server 12 SP2-BCL:libctf0 SUSE Linux Enterprise Server 12 SP2-LTSS:binutils SUSE Linux Enterprise Server 12 SP2-LTSS:binutils-devel SUSE Linux Enterprise Server 12 SP2:binutils SUSE Linux Enterprise Server 12 SP3:binutils SUSE Linux Enterprise Server 12 SP4-ESPOS:binutils SUSE Linux Enterprise Server 12 SP4-ESPOS:binutils-devel SUSE Linux Enterprise Server 12 SP4-ESPOS:libctf-nobfd0 SUSE Linux Enterprise Server 12 SP4-ESPOS:libctf0 SUSE Linux Enterprise Server 12 SP4-LTSS:binutils SUSE Linux Enterprise Server 12 SP4-LTSS:binutils-devel SUSE Linux Enterprise Server 12 SP4-LTSS:libctf-nobfd0 SUSE Linux Enterprise Server 12 SP4-LTSS:libctf0 SUSE Linux Enterprise Server 12 SP5:binutils SUSE Linux Enterprise Server 12 SP5:binutils-devel SUSE Linux Enterprise Server 12 SP5:libctf-nobfd0 SUSE Linux Enterprise Server 12 SP5:libctf0 SUSE Linux Enterprise Server 12-LTSS:binutils SUSE Linux Enterprise Server 12-LTSS:binutils-devel SUSE Linux Enterprise Server 15-LTSS:binutils SUSE Linux Enterprise Server 15-LTSS:binutils-devel SUSE Linux Enterprise Server 15-LTSS:binutils-devel-32bit SUSE Linux Enterprise Server 15-LTSS:libctf-nobfd0 SUSE Linux Enterprise Server 15-LTSS:libctf0 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:binutils SUSE Linux Enterprise Server Teradata 12 SP3:binutils SUSE Linux Enterprise Server for SAP Applications 12 SP2:binutils SUSE Linux Enterprise Server for SAP Applications 12 SP2:binutils-devel SUSE Linux Enterprise Server for SAP Applications 12 SP4:binutils SUSE Linux Enterprise Server for SAP Applications 12 SP4:binutils-devel SUSE Linux Enterprise Server for SAP Applications 12 SP4:libctf-nobfd0 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libctf0 SUSE Linux Enterprise Server for SAP Applications 12 SP5:binutils SUSE Linux Enterprise Software Development Kit 11 SP4:binutils SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-devel SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-gold SUSE Linux Enterprise Software Development Kit 12 SP2:binutils SUSE Linux Enterprise Software Development Kit 12 SP2:binutils-devel SUSE Linux Enterprise Software Development Kit 12 SP2:binutils-gold SUSE Linux Enterprise Software Development Kit 12 SP3:binutils SUSE Linux Enterprise Software Development Kit 12 SP3:binutils-devel SUSE Linux Enterprise Software Development Kit 12 SP3:binutils-gold SUSE Linux Enterprise Software Development Kit 12 SP5:binutils SUSE Linux Enterprise Software Development Kit 12 SP5:binutils-devel SUSE Linux Enterprise Software Development Kit 12 SP5:binutils-gold SUSE OpenStack Cloud 9:binutils SUSE OpenStack Cloud 9:binutils-devel SUSE OpenStack Cloud 9:libctf-nobfd0 SUSE OpenStack Cloud 9:libctf0 SUSE OpenStack Cloud Crowbar 9:binutils SUSE OpenStack Cloud Crowbar 9:binutils-devel SUSE OpenStack Cloud Crowbar 9:libctf-nobfd0 SUSE OpenStack Cloud Crowbar 9:libctf0 moderate 5 AV:N/AC:L/Au:N/C:N/I:N/A:P 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L