CVE-2018-12698 demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the te...
HighCVSS 7.5
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/binutils(Debian:12) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| debian/binutils(Debian:13) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| debian/binutils(Debian:14) | < 2.32.51.20190707-1 | 2.32.51.20190707-1 |
| GNU binutils | = 2.30 | No fix listed |
| Canonical Ubuntu Linux | = 16.04.4 | No fix listed |
References
- Debian Security Tracker CVE-2018-12698 vendor-advisory
- 104539 third-party-advisory vdb-entry
- bugs.launchpad.net exploit third-party-advisory
- gcc.gnu.org exploit issue-tracking vendor-advisory
- GLSA-201908-01 vendor-advisory
- sourceware.org exploit issue-tracking third-party-advisory
- USN-4326-1 vendor-advisory
- USN-4336-1 vendor-advisory