VDB

CVE-2016-4490

CVE-2016-4490 PUBLISHED

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.

EPSS 0.61% · 70.2th percentile

Risk Scores

EPSS Score
0.61%
70.2th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSnescc1.3.5-1.1, 1.3.5-1, 0
Ubuntu:16.04:LTSgccxml0, 0.9.0+git20140716-6
Ubuntu:20.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4ubuntu3, 0, 1:3.4.6+dfsg2-4.1
Ubuntu:24.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:16.04:LTSvalgrind*, *, *
Ubuntu:16.04:LTSsdcc3.5.0+dfsg-2, 0, 3.4.0+dfsg-2ubuntu1
Ubuntu:18.04:LTSbinutils-h8300-hms0, 2.16.1-10build1, 2.16.1-10
Ubuntu:16.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4ubuntu1, 0
Ubuntu:16.04:LTSgcc-arm-none-eabi*, 0, *
Ubuntu:16.04:LTSht0, 2.1.0-1, 2.1.0-1build1
Ubuntu:16.04:LTSbinutils-h8300-hms2.16.1-10, 0
Ubuntu:22.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:14.04:LTSgdb7.7-0ubuntu1, 0, 7.6.1-0ubuntu3
Ubuntu:25.10binutils-h8300-hms2.16.1-10build1, 0
Ubuntu:16.04:LTSnescc1.3.5-1, 0
Ubuntu:24.04:LTSgcc-h8300-hms0, 1:3.4.6+dfsg2-4.2
Ubuntu:22.04:LTSgcc-h8300-hms0, 1:3.4.6+dfsg2-4.2, 1:3.4.6+dfsg2-4.1
Ubuntu:25.10gcc-h8300-hms1:3.4.6+dfsg2-4.2, 0
Ubuntu:22.04:LTSnescc1.3.5-1.1build1, 0
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu13, 2.24-5ubuntu14.2+esm8, 2.24-5ubuntu1

…and 9 more

Exploit Intelligence

Timeline

  • Feb 24, 2017 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 16, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›