CVE-2017-9749: The *regs* macros in opcodes/bfin-dis.c in GNU Binutils 2.28 allow remote attackers to cause a denial of se...

Security readout for executives and security teams

CVE-2017-9749 is a GNU Binutils 2.28 flaw where a specially crafted binary can crash analysis tooling such as objdump. Business risk is mainly disruption to developer, malware-analysis, or CI systems that process untrusted binaries. The provided sources do not show active exploitation or a confirmed full system compromise path. Exposure is most likely where GNU Binutils 2.28, or an unpatched downstream package, processes attacker-supplied binaries. Internet exposure is indirect: the attacker must get a crafted file into a build, reverse-engineering, scanning, or upload workflow that invokes affected Binutils tooling. Prioritize remediation for teams that analyze unknown binaries or run automated build and scanning pipelines. For ordinary servers that do not process attacker-supplied binaries with Binutils, urgency is lower, but patching remains appropriate through normal package management. Mitigation focus: Inventory systems using GNU Binutils 2.28 or downstream packages based on it.; Apply vendor or distribution security updates, including guidance referenced by GLSA-201801-01.; Avoid processing untrusted binaries with affected objdump versions until patched..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.