What’s Vulnerable › Vulnerabilities

CVE-2017-13716

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-28 · updated 2026-06-17
• Weakness: CWE-770

Description

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service (excessive memory allocation and application crash) via a crafted file, as demonstrated by a call from the Binary File Descriptor (BFD) library (aka libbfd).

Affected products

• GNU Binutils: 2.29

References

• https://sourceware.org/bugzilla/show_bug.cgi?id=22009
• https://sourceware.org/bugzilla/show_bug.cgi?id=22009

Get alerted when CVE-2017-13716 or the next vulnerability affects your stack