Vulnetix
Try Vulnetix Request Demo
CVE-2016-4491 PUBLISHED

The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."

EPSS 0.52% · 66.6th percentile

Risk Scores

EPSS Score
0.52%
66.6th percentile

Affected Products

VendorProductVersions
Ubuntu:22.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4.2, 0, 1:3.4.6+dfsg2-4.1
Ubuntu:16.04:LTSht0, 2.1.0-1build1, 2.1.0-1
Ubuntu:16.04:LTSgdb0, 7.11-0ubuntu1, 7.10.90.20160220-0ubuntu1
Ubuntu:18.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4ubuntu3, 1:3.4.6+dfsg2-4ubuntu1, 0
Ubuntu:16.04:LTSnescc0, 1.3.5-1
Ubuntu:22.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:25.10gcc-h8300-hms0, 1:3.4.6+dfsg2-4.2
Ubuntu:14.04:LTSlibiberty20131116-1, 0
Ubuntu:16.04:LTSlibiberty20141014-1, 20160215-1, 0
Ubuntu:16.04:LTSsdcc3.5.0+dfsg-1, 3.5.0+dfsg-2, 3.4.0+dfsg-2ubuntu1
Ubuntu:14.04:LTSgdb7.7.1-0ubuntu5~14.04.2, 0, 7.7-0ubuntu3.1
Ubuntu:20.04:LTSnescc0, 1.3.5-1.1build1
Ubuntu:24.04:LTSgcc-h8300-hms0, 1:3.4.6+dfsg2-4.2
Ubuntu:24.04:LTSbinutils-h8300-hms0, 2.16.1-10build1
Ubuntu:20.04:LTSgcc-h8300-hms1:3.4.6+dfsg2-4ubuntu3, 0, 1:3.4.6+dfsg2-4.1
Ubuntu:16.04:LTSbinutils-h8300-hms0, 2.16.1-10
Ubuntu:16.04:LTSgcc-h8300-hms0, 1:3.4.6+dfsg2-4ubuntu1
Ubuntu:22.04:LTSnescc0, 1.3.5-1.1build1
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu14.1, 0, 2.23.52.20130913-0ubuntu1
Ubuntu:16.04:LTSgcc-arm-none-eabi0, 15:4.9.3+svn227297-1, 15:4.9.3+svn227297-1build1

…and 10 more

Timeline

References

Open in Interactive Console →