CVEs-PoC/2017/CVE-2017-9039.md

CVE-2017-9039

Description

GNU Binutils 2.28 allows remote attackers to cause a denial of service (memory consumption) via a crafted ELF file with many program headers, related to the get_program_headers function in readelf.c.

POC

Reference

• https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/
• https://blogs.gentoo.org/ago/2017/05/12/binutils-multiple-crashes/

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/fokypoky/places-list