Vulnetix
Try Vulnetix Request Demo
CVE-2018-20712 PUBLISHED

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

EPSS 0.80% · 73.9th percentile

Risk Scores

EPSS Score
0.80%
73.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibiberty0, 20160215-1ubuntu0.2, 20141014-1

Timeline

References

Open in Interactive Console →