An issue was discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_arm_hp_template, demangle_class_name, demangle_fund_type, do_type, do_arg, demangle_args, and demangle_nested_args. This can occur during execution of nm-new.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade binutils-develUpgrade binutilsUpgrade binutils-debuginfo | Apr 27, 2020 | Jun 22, 2018 |
| Centos_linux | — | Upgrade binutils-debuginfoUpgrade binutilsUpgrade binutils-devel | Aug 28, 2019 | Jun 22, 2018 |
| Gentoo Linux | — | Upgrade sys-devel/binutils. | Aug 6, 2019 | Jun 22, 2018 |
| Oracle Solaris | — | Upgrade developer/gnu-binutils-cross-sparc to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4Upgrade developer/gnu-binutils-cross-i386 to version 2.32.0-11.4.9.0.1.1.0 on Solaris 11.4 | May 30, 2019 | Jun 22, 2018 |
| Oracle_linux | — | Upgrade binutils-develUpgrade binutils | Aug 15, 2019 | Apr 13, 2018 |
| Redhat_linux | — | Upgrade binutilsNo solution existsUpgrade binutils-develUpgrade binutils-debuginfo | Aug 7, 2019 | Jun 22, 2018 |
| Ubuntu | — | Upgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils-multiarchUpgrade binutilsUpgrade libiberty-devUpgrade binutils (Ubuntu Pro) | Apr 9, 2020 | Jun 22, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub