View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2017-9754 severity low: SUSE including 4 source package names (binutils, binutils-devel, binutils-devel-32bit, binutils-gold), 17 product×package rows across 10 product lines (Magnum Orchestration 7, SUSE Linux Enterprise Server 11 SP1 for Teradata, … (10 product lines)): Known Not Affected 17.
The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, does not validate a certain offset, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.