The get_count function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31, allows remote attackers to cause a denial of service (malloc called with the result of an integer-overflowing calculation) or possibly have unspecified other impact via a crafted string, as demonstrated by c++filt.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade binutils | Oct 7, 2024 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade binutils-develUpgrade binutils | Jun 17, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp3 | — | Upgrade binutilsUpgrade binutils-devel | Apr 16, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp5 | — | Upgrade binutils-develUpgrade binutils | Feb 24, 2020 | Oct 18, 2018 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Oct 18, 2018 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 18, 2018 |
| Suse | — | Upgrade cross-ia64-binutilsUpgrade binutils-develUpgrade binutils-goldUpgrade cross-sparc64-binutilsUpgrade cross-ppc-binutilsUpgrade cross-m68k-binutilsUpgrade cross-sparc-binutilsUpgrade cross-rx-binutilsUpgrade binutilsUpgrade cross-ppc64le-binutilsUpgrade cross-aarch64-binutilsUpgrade cross-spu-binutilsUpgrade binutils-devel-32bitUpgrade libctf0Upgrade libctf-nobfd0Upgrade cross-hppa-binutilsUpgrade cross-mips-binutilsUpgrade cross-i386-binutilsUpgrade cross-riscv64-binutilsUpgrade cross-avr-binutilsUpgrade cross-ppc64-binutilsUpgrade cross-s390x-binutilsUpgrade cross-epiphany-binutilsUpgrade cross-s390-binutilsUpgrade cross-arm-binutilsUpgrade cross-hppa64-binutils | Oct 15, 2019 | Oct 18, 2018 |
| Ubuntu | — | Upgrade binutils (Ubuntu Pro)Upgrade libiberty-devUpgrade binutils-multiarchUpgrade binutils-multiarch (Ubuntu Pro)Upgrade binutils | Apr 9, 2020 | Oct 18, 2018 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 18, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub