cpe:/a:gnu:binutils:2.28 CVE-2017-9750 2017-06-19T00:29:00.483-04:00 2018-01-08T21:29:07.770-05:00 6.8 NETWORK MEDIUM NONE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov EXPLOIT-DB 42198 BID 99118 GENTOO GLSA-201801-01 CONFIRM https://sourceware.org/bugzilla/show_bug.cgi?id=21587 opcodes/rx-decode.opc in GNU Binutils 2.28 lacks bounds checks for certain scale arrays, which allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file, as demonstrated by mishandling of this file during "objdump -D" execution.