CVE-2017-15023

CVE-2017-15023 is a denial-of-service vulnerability affecting the GNU Binutils BFD library (libbfd) versions 2.29 and earlier. It stems from improper validation of the format count in the read_formatted_entries function, allowing a remote attacker to trigger a NULL pointer dereference and application crash via a specially crafted ELF file. Rated Medium (CVSS 5.5), this vulnerability requires local access and user interaction to exploit, leading to high availability impact but no confidentiality or integrity compromise. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.