CVE-2017-6966

CVE-2017-6966 describes a use-after-free vulnerability in GNU Binutils 2.28, specifically within the readelf utility when processing MSP430 binaries with multiple, relocated sections. This flaw, stemming from mishandling of symbol indices and state, could lead to a denial of service. With a CVSS score of 5.5 (Medium), it requires local access and user interaction (e.g., opening a malicious file) to trigger, resulting in high availability impact but no confidentiality or integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.