An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-binutilsamazon-linux-ami-2-upgrade-binutils-debuginfoamazon-linux-ami-2-upgrade-binutils-devel | Apr 27, 2020 | Jun 22, 2018 | |
| Centos_linux | — | centos-upgrade-binutilscentos-upgrade-binutils-debuginfocentos-upgrade-binutils-devel | Aug 28, 2019 | Jun 22, 2018 |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutils | Aug 6, 2019 | Jun 22, 2018 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-32-0-11-4-9-0-1-1-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-32-0-11-4-9-0-1-1-0 | May 30, 2019 | Jun 22, 2018 | |
| Oracle_linux | — | oracle-linux-upgrade-binutilsoracle-linux-upgrade-binutils-devel | Aug 15, 2019 | Apr 13, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-devel | Aug 7, 2019 | Jun 22, 2018 | |
| Ubuntu | ubuntu-pro-upgrade-binutilsubuntu-pro-upgrade-binutils-multiarchubuntu-upgrade-binutilsubuntu-upgrade-binutils-multiarchubuntu-upgrade-libiberty-dev | Apr 9, 2020 | Jun 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub