CVE-2017-14129: The read_section function in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distribu...

Security readout for executives and security teams

CVE-2017-14129 is a crash bug in GNU Binutils libbfd 2.29. If a system or service parses a malicious ELF file, affected tools using libbfd can crash, causing denial of service. The provided sources do not show code execution, data theft, or active exploitation. Exposure is most likely where Binutils or libbfd-based tools process untrusted ELF files, such as analysis pipelines, build systems, package inspection, malware triage, or upload workflows. Systems that never parse attacker-supplied ELF content have lower practical exposure. Treat as a targeted availability risk for systems that inspect binaries. Prioritize remediation in exposed analysis, CI, and upload-processing workflows; routine patching is reasonable for systems without untrusted ELF parsing. Mitigation focus: Inventory Binutils and libbfd usage, especially GNU Binutils 2.29.; Apply vendor or distribution guidance, including Gentoo GLSA-201801-01 where applicable.; Avoid parsing untrusted ELF files with affected tools until updated..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.