An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-devel | Apr 27, 2020 | Jun 22, 2018 |
| Centos_linux | — | Upgrade binutilsUpgrade binutils-develUpgrade binutils-debuginfo | Aug 28, 2019 | Jun 22, 2018 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Aug 6, 2019 | Jun 22, 2018 |
| Oracle Solaris | — | Upgrade developer/gnu-binutils-cross-sparc to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils-cross-i386 to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4 | May 30, 2019 | Jun 22, 2018 |
| Oracle_linux | — | Upgrade binutilsUpgrade binutils-devel | Aug 15, 2019 | Apr 13, 2018 |
| Redhat_linux | — | No solution existsUpgrade binutils-develUpgrade binutils-debuginfoUpgrade binutils | Aug 7, 2019 | Jun 22, 2018 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutils (Ubuntu Pro)Upgrade binutilsUpgrade libiberty-dev | Apr 9, 2020 | Jun 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub