CVE-2017-17080

CVE-2017-17080 is a denial-of-service vulnerability affecting GNU Binutils 2.29.1, specifically in the Binary File Descriptor (BFD) library's elf.c. It stems from a lack of validation for core note sizes, allowing a remote attacker to trigger a heap-based buffer over-read and application crash via a crafted object file. Rated Medium (CVSS 5.5), this vulnerability requires user interaction (UI:R) and local access (AV:L) to exploit, leading to high availability impact (A:H) but no confidentiality or integrity loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, suggesting low current threat activity.