Vulnetix
Try Vulnetix Request Demo
CVE-2018-18700 PUBLISHED

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

EPSS 0.63% · 70.1th percentile

Risk Scores

EPSS Score
0.63%
70.1th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSlibiberty20170913-1, 0
Ubuntu:18.04:LTSbinutils2.30-21ubuntu1~18.04.2, 2.30-21ubuntu1~18.04.1, 2.30-21ubuntu1~18.04
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu14.2+esm5, 2.24-5ubuntu14.2+esm6, 2.24-5ubuntu14.2+esm7
Ubuntu:Pro:16.04:LTSbinutils2.26-5ubuntu1, 2.26-6ubuntu1, 2.26-7ubuntu2
Ubuntu:16.04:LTSlibiberty20160215-1ubuntu0.2, 20160215-1, 20141014-1

Timeline

References

Open in Interactive Console →