Skip to content

CVE-2018-9996 An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive sta...

MediumCVSS 5.5 EPSS 1.3%
Published
Updated
Exploit status
No public exploit known

Description

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

Affected products

ProductAffected versionsFixed in
debian/binutils(Debian:12) All versions No fix listed
debian/binutils(Debian:12) = 2.40-2 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230111-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230215-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230501-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230510-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230602-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230611-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230611-2 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230622-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230625-1 No fix listed
debian/binutils(Debian:12) = 2.40.50.20230630-1 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230705-1 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230714-1 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230714-2 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230720-1 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230729-1 No fix listed
debian/binutils(Debian:12) = 2.40.90.20230729-2 No fix listed
debian/binutils(Debian:12) = 2.41-1 No fix listed
debian/binutils(Debian:12) = 2.41-2 No fix listed
debian/binutils(Debian:12) = 2.41-3 No fix listed
debian/binutils(Debian:12) = 2.41-4 No fix listed
debian/binutils(Debian:12) = 2.41-5 No fix listed
debian/binutils(Debian:12) = 2.41-6 No fix listed
debian/binutils(Debian:12) = 2.41-7 No fix listed
Show 175 more
ProductAffected versionsFixed in
debian/binutils(Debian:12) = 2.41.50.20230731-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20230803-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20230905-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231010-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231101-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231125-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231202-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231206-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231214-1 No fix listed
debian/binutils(Debian:12) = 2.41.50.20231227-1 No fix listed
debian/binutils(Debian:12) = 2.41.90.20240115-1 No fix listed
debian/binutils(Debian:12) = 2.41.90.20240122-1 No fix listed
debian/binutils(Debian:12) = 2.42-1 No fix listed
debian/binutils(Debian:12) = 2.42-2 No fix listed
debian/binutils(Debian:12) = 2.42-2+hurd.1 No fix listed
debian/binutils(Debian:12) = 2.42-3 No fix listed
debian/binutils(Debian:12) = 2.42-4 No fix listed
debian/binutils(Debian:12) = 2.42.50.20240614-1 No fix listed
debian/binutils(Debian:12) = 2.42.50.20240618-1 No fix listed
debian/binutils(Debian:12) = 2.42.50.20240625-1 No fix listed
debian/binutils(Debian:12) = 2.42.50.20240710-1 No fix listed
debian/binutils(Debian:12) = 2.42.90.20240720-1 No fix listed
debian/binutils(Debian:12) = 2.42.90.20240720-2 No fix listed
debian/binutils(Debian:12) = 2.43-1 No fix listed
debian/binutils(Debian:12) = 2.43-2 No fix listed
debian/binutils(Debian:12) = 2.43.1-1 No fix listed
debian/binutils(Debian:12) = 2.43.1-2 No fix listed
debian/binutils(Debian:12) = 2.43.1-3 No fix listed
debian/binutils(Debian:12) = 2.43.1-4 No fix listed
debian/binutils(Debian:12) = 2.43.1-5 No fix listed
debian/binutils(Debian:12) = 2.43.50.20240817-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20240909-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241004-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241112-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241126-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241126-2 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241126-3 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241204-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241204-2 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241210-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241215-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241221-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20241230-1 No fix listed
debian/binutils(Debian:12) = 2.43.50.20250108-1 No fix listed
debian/binutils(Debian:12) = 2.43.90.20250122-1 No fix listed
debian/binutils(Debian:12) = 2.43.90.20250122-2 No fix listed
debian/binutils(Debian:12) = 2.43.90.20250127-1 No fix listed
debian/binutils(Debian:12) = 2.43.90.20250202-1 No fix listed
debian/binutils(Debian:12) = 2.44-1 No fix listed
debian/binutils(Debian:12) = 2.44-2 No fix listed
debian/binutils(Debian:12) = 2.44-3 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250201-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250207-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250218-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250218-2 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250309-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250405-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250502-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250520-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250528-1 No fix listed
debian/binutils(Debian:12) = 2.44.50.20250707-1 No fix listed
debian/binutils(Debian:12) = 2.44.90.20250719-1 No fix listed
debian/binutils(Debian:12) = 2.45-1 No fix listed
debian/binutils(Debian:12) = 2.45-2 No fix listed
debian/binutils(Debian:12) = 2.45-3 No fix listed
debian/binutils(Debian:12) = 2.45-4 No fix listed
debian/binutils(Debian:12) = 2.45-5 No fix listed
debian/binutils(Debian:12) = 2.45-6 No fix listed
debian/binutils(Debian:12) = 2.45-7 No fix listed
debian/binutils(Debian:12) = 2.45-8 No fix listed
debian/binutils(Debian:12) = 2.45.50.20250813-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20250903-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251005-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251023-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251023-2 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251122-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251125-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251201-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20251209-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20260116-1 No fix listed
debian/binutils(Debian:12) = 2.45.50.20260119-1 No fix listed
debian/binutils(Debian:12) = 2.45.90.20260125-1 No fix listed
debian/binutils(Debian:12) = 2.45.90.20260201-1 No fix listed
debian/binutils(Debian:12) = 2.46-1 No fix listed
debian/binutils(Debian:12) = 2.46-2 No fix listed
debian/binutils(Debian:12) = 2.46-3 No fix listed
debian/binutils(Debian:12) = 2.46.50.20260216-1 No fix listed
debian/binutils(Debian:12) = 2.46.50.20260509-1 No fix listed
debian/binutils(Debian:12) = 2.46.50.20260519-1 No fix listed
debian/binutils(Debian:12) = 2.46.50.20260608-1 No fix listed
debian/binutils(Debian:12) = 2.46.50.20260617-1 No fix listed
debian/binutils(Debian:12) = 2.46.90.20260712-1 No fix listed
debian/binutils(Debian:12) = 2.47-1 No fix listed
debian/binutils(Debian:12) = 2.47-2 No fix listed
debian/binutils(Debian:12) = 2.47-3 No fix listed
debian/binutils(Debian:12) = 2.47-4 No fix listed
debian/binutils(Debian:12) = 2.47-5 No fix listed
debian/binutils(Debian:12) = 2.47-6 No fix listed
debian/binutils(Debian:12) = 2.47.50.20260813-1 No fix listed
debian/binutils(Debian:12) = 2.47.50.20260813-2 No fix listed
debian/binutils(Debian:12) = 2.47.50.20260813-3 No fix listed
debian/binutils(Debian:12) = 2.47.50.20260901-1 No fix listed
debian/binutils(Debian:12) = 2.47.50.20261004-1 No fix listed
debian/binutils(Debian:12) = 2.47.50.20261020-1 No fix listed
debian/binutils(Debian:12) = 2.47.50.20261021-1 No fix listed
debian/binutils(Debian:13) All versions No fix listed
debian/binutils(Debian:13) = 2.44-3 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250201-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250207-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250218-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250218-2 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250309-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250405-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250502-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250520-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250528-1 No fix listed
debian/binutils(Debian:13) = 2.44.50.20250707-1 No fix listed
debian/binutils(Debian:13) = 2.44.90.20250719-1 No fix listed
debian/binutils(Debian:13) = 2.45-1 No fix listed
debian/binutils(Debian:13) = 2.45-2 No fix listed
debian/binutils(Debian:13) = 2.45-3 No fix listed
debian/binutils(Debian:13) = 2.45-4 No fix listed
debian/binutils(Debian:13) = 2.45-5 No fix listed
debian/binutils(Debian:13) = 2.45-6 No fix listed
debian/binutils(Debian:13) = 2.45-7 No fix listed
debian/binutils(Debian:13) = 2.45-8 No fix listed
debian/binutils(Debian:13) = 2.45.50.20250813-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20250903-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251005-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251023-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251023-2 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251122-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251125-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251201-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20251209-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20260116-1 No fix listed
debian/binutils(Debian:13) = 2.45.50.20260119-1 No fix listed
debian/binutils(Debian:13) = 2.45.90.20260125-1 No fix listed
debian/binutils(Debian:13) = 2.45.90.20260201-1 No fix listed
debian/binutils(Debian:13) = 2.46-1 No fix listed
debian/binutils(Debian:13) = 2.46-2 No fix listed
debian/binutils(Debian:13) = 2.46-3 No fix listed
debian/binutils(Debian:13) = 2.46.50.20260216-1 No fix listed
debian/binutils(Debian:13) = 2.46.50.20260509-1 No fix listed
debian/binutils(Debian:13) = 2.46.50.20260519-1 No fix listed
debian/binutils(Debian:13) = 2.46.50.20260608-1 No fix listed
debian/binutils(Debian:13) = 2.46.50.20260617-1 No fix listed
debian/binutils(Debian:13) = 2.46.90.20260712-1 No fix listed
debian/binutils(Debian:13) = 2.47-1 No fix listed
debian/binutils(Debian:13) = 2.47-2 No fix listed
debian/binutils(Debian:13) = 2.47-3 No fix listed
debian/binutils(Debian:13) = 2.47-4 No fix listed
debian/binutils(Debian:13) = 2.47-5 No fix listed
debian/binutils(Debian:13) = 2.47-6 No fix listed
debian/binutils(Debian:13) = 2.47.50.20260813-1 No fix listed
debian/binutils(Debian:13) = 2.47.50.20260813-2 No fix listed
debian/binutils(Debian:13) = 2.47.50.20260813-3 No fix listed
debian/binutils(Debian:13) = 2.47.50.20260901-1 No fix listed
debian/binutils(Debian:13) = 2.47.50.20261004-1 No fix listed
debian/binutils(Debian:13) = 2.47.50.20261020-1 No fix listed
debian/binutils(Debian:13) = 2.47.50.20261021-1 No fix listed
debian/binutils(Debian:14) All versions No fix listed
debian/binutils(Debian:14) = 2.44-3 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250201-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250207-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250218-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250218-2 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250309-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250405-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250502-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250520-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250528-1 No fix listed
debian/binutils(Debian:14) = 2.44.50.20250707-1 No fix listed
debian/binutils(Debian:14) = 2.44.90.20250719-1 No fix listed
debian/binutils(Debian:14) = 2.45-1 No fix listed

References