CVE-2017-14128: The decode_line_info function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist...

Security readout for executives and security teams

CVE-2017-14128 is a denial-of-service issue in GNU Binutils libbfd. A specially crafted ELF file can crash applications that use the vulnerable library to read debugging line information. The main business risk is disruption of build, analysis, packaging, or security tooling that processes untrusted binaries. Exposure is most likely where GNU Binutils or libbfd-based tools process ELF files from external or untrusted sources, including build pipelines, malware analysis, package inspection, and developer tooling. The supplied data only names GNU Binutils 2.29/libbfd, not downstream product lists. Treat this as a moderate operational reliability issue unless affected tooling is internet-facing or business-critical. Prioritize patching systems that automatically inspect customer, partner, or internet-sourced binaries. Mitigation focus: Inventory systems with GNU Binutils/libbfd, especially version 2.29.; Apply vendor-distributed Binutils updates, following Gentoo GLSA or your OS vendor guidance.; Confirm the deployed package includes the upstream Sourceware fix for bug 22059..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.