CVE-2017-17123 — binutils: NULL pointer dereference in the coff_slurp_reloc_table function

Back Back to CVE browser

MEDIUM

binutils: NULL pointer dereference in the coff_slurp_reloc_table function

Published Dec 4, 2017

5.5

MEDIUM

CVSS 3.0

EPSS 1.59%

Description

The coff_slurp_reloc_table function in coffcode.h in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29.1, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted COFF based file.

Affected products

Red Hat Enterprise Linux 5

binutils

Will not fix
Red Hat Enterprise Linux 5

binutils220

Will not fix
Red Hat Enterprise Linux 6

binutils

Will not fix
Red Hat Enterprise Linux 7

binutils

Will not fix

Product	Package	State	Advisory
Red Hat Enterprise Linux 5	binutils	Will not fix	n/a
Red Hat Enterprise Linux 5	binutils220	Will not fix	n/a
Red Hat Enterprise Linux 6	binutils	Will not fix	n/a
Red Hat Enterprise Linux 7	binutils	Will not fix	n/a

Remediation

No remediation recorded yet.

Metrics

1.59% 0.01588

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01588

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (21 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.59% (0.01588)	74.72th	v5 (v2026.06.15)
Sep 22, 2026	1.59% (0.01588)	74.53th	v5 (v2026.06.15)
Sep 21, 2026	2.73% (0.02735)	85.40th	v5 (v2026.06.15)
Sep 6, 2026	1.59% (0.01588)	73.99th	v5 (v2026.06.15)
Sep 5, 2026	2.73% (0.02735)	85.09th	v5 (v2026.06.15)
Aug 30, 2026	1.59% (0.01588)	73.86th	v5 (v2026.06.15)
Aug 28, 2026	2.73% (0.02735)	84.99th	v5 (v2026.06.15)
Aug 24, 2026	1.59% (0.01588)	73.71th	v5 (v2026.06.15)
Aug 23, 2026	2.73% (0.02735)	84.93th	v5 (v2026.06.15)
Jun 15, 2026	1.59% (0.01588)	72.35th	v5 (v2026.06.15)
Mar 17, 2025	0.12% (0.00123)	28.93th	v4 (v2025.03.14)
Jul 20, 2024	0.51% (0.00506)	76.70th	v3 (v2023.03.01)
Feb 8, 2024	0.50% (0.00504)	75.78th	v3 (v2023.03.01)
Nov 14, 2023	0.50% (0.00504)	73.73th	v3 (v2023.03.01)
Nov 8, 2023	0.36% (0.00355)	68.88th	v3 (v2023.03.01)
Oct 14, 2023	0.29% (0.00290)	65.42th	v3 (v2023.03.01)
Mar 7, 2023	0.20% (0.00204)	56.56th	v3 (v2023.03.01)
Mar 6, 2023	1.14% (0.01136)	59.45th	v2 (v2022.01.01)
Feb 4, 2022	1.14% (0.01136)	34.23th	v2 (v2022.01.01)
Feb 3, 2022	1.30% (0.01300)	31.12th	v5 (v2026.06.15)
Apr 14, 2021	1.30% (0.01300)	0.00th	v1

Weaknesses (1)

CWE-476

NULL Pointer Dereference

References (7)

https://access.redhat.com/security/cve/CVE-2017-17123
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1524509
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-17123
https://security.gentoo.org/glsa/201811-17
vendor-advisoryx_refsource_GENTOO
https://sourceware.org/bugzilla/show_bug.cgi?id=22509
x_refsource_MISCExploitIssue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543
x_refsource_MISC
https://www.cve.org/CVERecord?id=CVE-2017-17123

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2017-17123		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1524509		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2017-17123
https://security.gentoo.org/glsa/201811-17		vendor-advisoryx_refsource_GENTOO
https://sourceware.org/bugzilla/show_bug.cgi?id=22509		x_refsource_MISCExploitIssue Tracking
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=4581a1c7d304ce14e714b27522ebf3d0188d6543		x_refsource_MISC
https://www.cve.org/CVERecord?id=CVE-2017-17123