CVE-2017-9954 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-9954 Interim 1 38 2025-10-05T02:17:41Z current 2021-05-30T13:57:46Z 2025-10-05T02:17:41Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-9954 The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2020-January/006371.html E-Mail link for SUSE-CU-2019:723-1 https://lists.suse.com/pipermail/sle-security-updates/2017-November/003462.html E-Mail link for SUSE-SU-2017:3170-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container caasp/v4/openldap:beta1 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-Basic-On-Demand Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-HPC-On-Demand Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-Azure-Standard-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP5 binutils binutils-2.29.1-9.20.2 binutils-devel binutils-devel-2.29.1-9.20.2 binutils-devel-32bit binutils-gold binutils-gold-2.29.1-9.20.2 cross-ppc-binutils-2.29.1-9.20.2 cross-spu-binutils-2.29.1-9.20.2 binutils-2.29.1-9.20.2 as a component of Container caasp/v4/openldap:beta1 binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-Azure-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-EC2-HVM-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-GCE-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-OCI-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-Azure binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-Azure-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-GCE binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-GCE-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP4-SAP-OCI-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-Basic-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-HPC-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-HPC-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-SAP-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-SAP-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-Azure-Standard-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-EC2-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-EC2-ECS-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-EC2-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-EC2-SAP-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-EC2-SAP-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-GCE-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-GCE-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-GCE-SAP-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-GCE-SAP-On-Demand binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-OCI-BYOS-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production binutils-2.29.1-9.20.2 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Desktop 12 SP2 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Desktop 12 SP3 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server 12 SP2 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server 12 SP3 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP1 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 binutils-devel-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 binutils-gold-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 cross-ppc-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 cross-spu-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 binutils-devel-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 binutils-gold-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 cross-ppc-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 cross-spu-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 binutils-devel-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 binutils-gold-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 cross-ppc-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 cross-spu-binutils-2.29.1-9.20.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 binutils as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata binutils as a component of SUSE Linux Enterprise Server 11 SP3 LTSS binutils as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata binutils as a component of SUSE Linux Enterprise Server 11 SP4-LTSS binutils-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils-devel-32bit as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils-gold as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 binutils as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 The getvalue function in tekhex.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted tekhex file, as demonstrated by mishandling within the nm program. CVE-2017-9954 Container caasp/v4/openldap:beta1:binutils-2.29.1-9.20.2 Image SLES12-SP4-Azure-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-EC2-HVM-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-GCE-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-OCI-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-Azure:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-Azure-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-EC2-HVM:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-EC2-HVM-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-GCE:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-GCE-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP4-SAP-OCI-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-Basic-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-HPC-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-HPC-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-SAP-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-SAP-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-Azure-Standard-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-EC2-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-EC2-ECS-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-EC2-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-EC2-SAP-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-EC2-SAP-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-GCE-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-GCE-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-GCE-SAP-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-GCE-SAP-On-Demand:binutils-2.29.1-9.20.2 Image SLES12-SP5-OCI-BYOS-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:binutils-2.29.1-9.20.2 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:binutils-2.29.1-9.20.2 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Desktop 12 SP2:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Desktop 12 SP3:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server 12 SP2:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server 12 SP3:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP1:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP2:binutils-devel-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP2:binutils-gold-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP2:cross-ppc-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP2:cross-spu-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP3:binutils-devel-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP3:binutils-gold-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP3:cross-ppc-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP3:cross-spu-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP5:binutils-devel-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP5:binutils-gold-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP5:cross-ppc-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Software Development Kit 12 SP5:cross-spu-binutils-2.29.1-9.20.2 SUSE Linux Enterprise Server 11 SP1 for Teradata:binutils SUSE Linux Enterprise Server 11 SP3 LTSS:binutils SUSE Linux Enterprise Server 11 SP3 for Teradata:binutils SUSE Linux Enterprise Server 11 SP4-LTSS:binutils SUSE Linux Enterprise Software Development Kit 11 SP4:binutils SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-devel SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-devel-32bit SUSE Linux Enterprise Software Development Kit 11 SP4:binutils-gold moderate 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H