CVE-2017-9747: The ieee_archive_p function in bfd/ieee.c in the Binary File Descriptor (BFD) library (aka libbfd), as dist...

Security readout for executives and security teams

CVE-2017-9747 is a flaw in GNU Binutils 2.28's BFD library where a specially crafted binary file can crash tools that parse it, such as objdump. Business risk is highest for services or workflows that automatically inspect untrusted binaries. Exposure is likely limited to systems using GNU Binutils 2.28 or libbfd-based tooling that processes attacker-supplied binary files. Upload analysis, malware triage, build, reverse-engineering, and debugging pipelines are more relevant than ordinary web servers. Prioritize remediation for internet-facing or partner-facing file analysis workflows. For developer-only workstations, handle through normal patch management unless they routinely inspect untrusted binaries. Mitigation focus: Check vendor or distribution advisories for Binutils/libbfd updates or backported fixes.; Upgrade affected GNU Binutils 2.28 installations where supported by the vendor.; Avoid processing untrusted binary files with vulnerable tools on production systems..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.