The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-devel | Apr 27, 2020 | Jun 22, 2018 |
| Centos_linux | — | Upgrade binutils-debuginfoUpgrade binutils-develUpgrade binutils | Aug 28, 2019 | Jun 22, 2018 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Aug 6, 2019 | Jun 22, 2018 |
| Oracle Solaris | — | Upgrade developer/gnu-binutils-cross-sparc to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils-cross-i386 to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4 | May 30, 2019 | Jun 22, 2018 |
| Oracle_linux | — | Upgrade binutils-develUpgrade binutils | Aug 15, 2019 | Apr 13, 2018 |
| Redhat_linux | — | Upgrade binutils-develUpgrade binutils-debuginfoNo solution existsUpgrade binutils | Aug 7, 2019 | Jun 22, 2018 |
| Ubuntu | — | Upgrade binutils-multiarchUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutilsUpgrade libiberty-devUpgrade binutils (Ubuntu Pro) | Apr 9, 2020 | Jun 22, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub