CVE-2017-1000249 Memory corruption in n/a

Medium 5.5 Published 11 Sep 2017 Updated 5 Aug 2024

A stack buffer overflow in the file() function allows attackers to execute arbitrary code or cause denial of service via a crafted ELF binary.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2017-1000249?

CVE-2017-1000249 is a medium-severity memory corruption vulnerability in n/a, published on 11 Sep 2017. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue in file() was introduced in commit 9611f31313a93aa036389c5f3b15eea53510d4d1 (Oct 2016) lets an attacker overwrite a fixed 20 bytes stack buffer with a specially crafted .notes section in an ELF binary. This was fixed in commit 35c94dc6acc418f1ad7f6241a6680e5327495793 (Aug 2017).

Weakness: CWE-119

Which versions are affected by CVE-2017-1000249?

It affects 1 product.

Products include File Project File.

How do I fix CVE-2017-1000249?

Apply the vendor's patch.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2017-1000249 being exploited?

There is no known exploitation of CVE-2017-1000249 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2017-1000249, DSA-3965-1, GHSA-7wwh-xwjg-8qfp.