The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Oct 7, 2024 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutilsUpgrade binutils-devel | Jun 17, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutils-develUpgrade binutils | Apr 16, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutilsUpgrade binutils-devel | Feb 24, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Oct 18, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 18, 2018 |
| Suse | — | Upgrade cross-rx-binutilsUpgrade binutilsUpgrade cross-aarch64-binutilsUpgrade cross-spu-binutilsUpgrade cross-m68k-binutilsUpgrade binutils-goldUpgrade cross-sparc64-binutilsUpgrade binutils-devel-32bitUpgrade binutils-develUpgrade cross-ppc64le-binutilsUpgrade cross-sparc-binutilsUpgrade cross-ia64-binutilsUpgrade cross-ppc-binutilsUpgrade cross-avr-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-hppa64-binutilsUpgrade cross-hppa-binutilsUpgrade cross-s390x-binutilsUpgrade cross-s390-binutilsUpgrade libctf-nobfd0Upgrade cross-i386-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-mips-binutilsUpgrade libctf0Upgrade cross-arm-binutilsUpgrade cross-ppc64-binutils | Oct 15, 2019 | Oct 18, 2018 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade libiberty-devUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutilsUpgrade binutils-multiarch | Apr 9, 2020 | Oct 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub