CVEvulnerability
CVE-2018-12698
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-06-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
Affected configurations
• gnu binutils 2.30
• canonical ubuntu linux 16.04.4
References
- http://www.securityfocus.com/bid/104539 Third Party Advisory, VDB Entry
- https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 Exploit, Third Party Advisory
- https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 Exploit, Issue Tracking, Vendor Advisory
- https://security.gentoo.org/glsa/201908-01 security.gentoo.org
- https://sourceware.org/bugzilla/show_bug.cgi?id=23057 Exploit, Issue Tracking, Third Party Advisory
- https://usn.ubuntu.com/4326-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4336-1/ usn.ubuntu.com
- http://www.securityfocus.com/bid/104539 Third Party Advisory, VDB Entry
- https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102 Exploit, Third Party Advisory
- https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454 Exploit, Issue Tracking, Vendor Advisory
- https://security.gentoo.org/glsa/201908-01 security.gentoo.org
- https://sourceware.org/bugzilla/show_bug.cgi?id=23057 Exploit, Issue Tracking, Third Party Advisory
- https://usn.ubuntu.com/4326-1/ usn.ubuntu.com
- https://usn.ubuntu.com/4336-1/ usn.ubuntu.com