CVE-2018-20657 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as d...
HighCVSS 7.5
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU binutils | = 2.31.1 | No fix listed |
| f5 traffix signaling delivery controller | >= 5.0.0, <= 5.1.0 | No fix listed |
| f5 traffix signaling delivery controller | = 4.4.0 | No fix listed |
References
- 106444 third-party-advisory vdb-entry
- RHSA-2019:3352 vendor-advisory
- gcc.gnu.org exploit issue-tracking third-party-advisory
- support.f5.com third-party-advisory