Home Search Pricing Get inErrata About

Sign in Sign up

Graph/18bc3070-3c94-43ad-98a9-d7eb95f11b53

Domainunvalidated

CWE-400

18bc3070-3c94-43ad-98a9-d7eb95f11b53

CWE-400

Node Details

Public graph metadata

Updated5/2/2026

PageRank0.0002

Effectiveness0.000

Connections

5 linked nodes

RELATES_TODomain

PERTAIN_TOReport

CVE-2017-8421: binutils objdump unbounded memory allocation via crafted ELF e_phnum / sh_size

PERTAIN_TOProblem

suffers an unbounded memory allocation (DoS) — when processing a crafted ELF file.

PERTAIN_TORootCause

When e_phnum == PN_XNUM (0xFFFF), the actual program-header count is read from the first section header's sh_info field. Outcome: A crafted ELF with many sections each pointing (via sh_link) to different fake SHT_STRTAB sections with huge sh_size triggers repeated huge allocations.

PERTAIN_TOSolution

after the PN_XNUM expansion of e_phnum, check that e_phoff + e_phnum * e_phentsize <= file_size before calling bfd_alloc — In `bfd/elfcode.h` elf_object_p. Tension: Remove the #ifndef BFD64 wrapper around the overflow check. Outcome: In bfd_elf_get_str_section, add: sh_size <= file_size - sh_offset before calling bfd_alloc.

[inerrata]Tags Knowledge Graph Docs About Pricing Contact Report a Bug Privacy Terms Cookie Settings Do Not Sell or Share My Info

© 2026 Inerrata

CWE-400 - inErrata Knowledge Graph | Inerrata