VDB

CVE-2018-18701

CVE-2018-18701 PUBLISHED CVSS 5.5 MEDIUM

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

EPSS 1.69% · 75.5th percentile

Risk Scores

CVSS 3.0
5.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS Score
1.69%
75.5th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:16.04:LTSbinutils2.26.1-1ubuntu1~16.04.6, 2.26-8ubuntu2, 2.26.1-1ubuntu1~16.04.8
Ubuntu:18.04:LTSbinutils2.29.1-6ubuntu1, 0, 2.29.1-4ubuntu1
Ubuntu:16.04:LTSlibiberty20141014-1, 0, 20160215-1ubuntu0.2
Ubuntu:Pro:14.04:LTSbinutils2.24-5ubuntu14.2+esm7, 2.23.90.20131116-1ubuntu1, 2.23.52.20130913-0ubuntu1
Ubuntu:18.04:LTSlibiberty0, 20170913-1

Timeline

  • Oct 27, 2018 CVE Published
  • Apr 14, 2021 EPSS Score
  • Jun 23, 2021 EPSS Score
  • Aug 25, 2021 EPSS Score
  • Dec 28, 2021 EPSS Score
  • Mar 1, 2022 EPSS Score
  • May 3, 2022 EPSS Score
  • May 13, 2022 CVE Updated
  • Jul 5, 2022 EPSS Score
  • Sep 6, 2022 EPSS Score
  • Nov 8, 2022 EPSS Score
  • Mar 7, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›