The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gccUpgrade gcc-gdb-pluginUpgrade libstdc++-docsUpgrade gcc-c++Upgrade gcc-plugin-develUpgrade libitm-develUpgrade gcc-offload-nvptxUpgrade cppUpgrade gcc-gfortranUpgrade libquadmath-develUpgrade libstdc++-staticUpgrade libstdc++-devel | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade libgfortranUpgrade gcc-gfortran-debuginfoUpgrade libgcc-debuginfoUpgrade libgompUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-c++Upgrade gcc-gdb-pluginUpgrade gcc-debuginfoUpgrade libstdc++-develUpgrade libasanUpgrade libasan-debuginfoUpgrade libitm-develUpgrade cppUpgrade gcc-c++-debuginfoUpgrade gccUpgrade libstdc++Upgrade libatomic-debuginfoUpgrade cpp-debuginfoUpgrade libgfortran-debuginfoUpgrade libubsanUpgrade libgccUpgrade libatomic-staticUpgrade gcc-plugin-devel-debuginfoUpgrade libatomicUpgrade libgomp-debuginfoUpgrade libstdc++-debuginfoUpgrade libitm-debuginfoUpgrade libubsan-debuginfoUpgrade libitmUpgrade gcc-gfortranUpgrade libstdc++-docsUpgrade gcc-debugsource | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade gcc-gdb-pluginUpgrade libgo-develUpgrade libstdc++-staticUpgrade libstdc++-develUpgrade libgo-staticUpgrade gcc-c++Upgrade libitm-staticUpgrade libatomicUpgrade libgompUpgrade libquadmath-staticUpgrade gcc-gfortranUpgrade libitmUpgrade libgccUpgrade libstdc++Upgrade cppUpgrade libasan-staticUpgrade gcc-objc++Upgrade gccUpgrade libatomic-staticUpgrade libquadmathUpgrade gcc-plugin-develUpgrade libstdc++-docsUpgrade libtsan-staticUpgrade libobjc | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade libatomicUpgrade libitm-develUpgrade libatomic-debuginfoUpgrade cppUpgrade liblsan-debuginfoUpgrade libasanUpgrade libgcc-debuginfoUpgrade gcc-debugsourceUpgrade libgfortranUpgrade libgompUpgrade gcc-gfortran-debuginfoUpgrade libstdc++-staticUpgrade libitmUpgrade gcc-gfortranUpgrade libstdc++-develUpgrade libgomp-offload-nvptx-debuginfoUpgrade libtsan-debuginfoUpgrade gcc-c++-debuginfoUpgrade gccUpgrade libgomp-offload-nvptxUpgrade libubsan-debuginfoUpgrade gcc-debuginfoUpgrade liblsanUpgrade gcc-gdb-pluginUpgrade gcc-c++Upgrade libstdc++Upgrade gcc-offload-nvptxUpgrade gcc-plugin-devel-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-plugin-develUpgrade libgccUpgrade libubsanUpgrade libquadmathNo solution existsUpgrade libitm-debuginfoUpgrade libgfortran-debuginfoUpgrade libgomp-debuginfoUpgrade libtsanUpgrade libstdc++-docsUpgrade gcc-offload-nvptx-debuginfoUpgrade libatomic-staticUpgrade libasan-debuginfoUpgrade cpp-debuginfoUpgrade libquadmath-debuginfoUpgrade libquadmath-develUpgrade libstdc++-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade libstdc++-debuginfoUpgrade libgompUpgrade gccUpgrade libtsan-debuginfoUpgrade gcc-plugin-develUpgrade gcc-debuginfoUpgrade libatomic-debuginfoUpgrade libubsan-debuginfoUpgrade libstdc++Upgrade libstdc++-develUpgrade libtsanUpgrade libitmUpgrade gcc-offload-nvptxUpgrade libstdc++-docsUpgrade libquadmathUpgrade libgcc-debuginfoUpgrade libitm-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libitm-develUpgrade liblsan-debuginfoUpgrade gcc-gdb-pluginUpgrade gcc-gfortran-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libubsanUpgrade gcc-plugin-devel-debuginfoUpgrade gcc-debugsourceUpgrade gcc-gdb-plugin-debuginfoUpgrade libasan-debuginfoUpgrade libgomp-debuginfoUpgrade libgomp-offload-nvptxUpgrade libatomic-staticUpgrade liblsanUpgrade libatomicUpgrade libstdc++-staticUpgrade libquadmath-debuginfoUpgrade libgfortranUpgrade libquadmath-develUpgrade libgccUpgrade libgfortran-debuginfoUpgrade cpp-debuginfoUpgrade gcc-c++-debuginfoUpgrade gcc-c++Upgrade libasanUpgrade gcc-gfortranUpgrade cpp | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub