CVE-2018-12641 An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are rec...
MediumCVSS 5.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU binutils | = 2.30 | No fix listed |
References
- RHSA-2019:2075 vendor-advisory
- bugs.launchpad.net third-party-advisory
- gcc.gnu.org issue-tracking vendor-advisory
- GLSA-201908-01 vendor-advisory
- sourceware.org exploit issue-tracking third-party-advisory
- USN-4326-1 vendor-advisory
- USN-4336-1 vendor-advisory