The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-c++Upgrade libitm-develUpgrade gcc-gdb-pluginUpgrade gccUpgrade libstdc++-docsUpgrade gcc-plugin-develUpgrade libquadmath-develUpgrade gcc-gfortranUpgrade libstdc++-develUpgrade gcc-offload-nvptxUpgrade cppUpgrade libstdc++-static | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade libgfortranUpgrade gccUpgrade gcc-debuginfoUpgrade libasanUpgrade gcc-c++-debuginfoUpgrade libstdc++-develUpgrade cppUpgrade gcc-gfortran-debuginfoUpgrade gcc-gdb-pluginUpgrade libitm-develUpgrade libasan-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade libgcc-debuginfoUpgrade gcc-c++Upgrade libgompUpgrade cpp-debuginfoUpgrade libubsan-debuginfoUpgrade libitmUpgrade gcc-debugsourceUpgrade libstdc++-docsUpgrade libstdc++Upgrade libgomp-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libatomicUpgrade libatomic-staticUpgrade libstdc++-debuginfoUpgrade libgccUpgrade gcc-gfortranUpgrade libitm-debuginfoUpgrade libgfortran-debuginfoUpgrade libubsanUpgrade libatomic-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade cppUpgrade libgo-staticUpgrade gcc-c++Upgrade libgompUpgrade libstdc++Upgrade gcc-gdb-pluginUpgrade libgo-develUpgrade libitm-staticUpgrade libquadmath-staticUpgrade libgccUpgrade libstdc++-staticUpgrade gcc-gfortranUpgrade libstdc++-develUpgrade libatomicUpgrade libitmUpgrade libtsan-staticUpgrade libquadmathUpgrade gccUpgrade gcc-objc++Upgrade gcc-plugin-develUpgrade libasan-staticUpgrade libatomic-staticUpgrade libobjcUpgrade libstdc++-docs | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade liblsanUpgrade libtsan-debuginfoUpgrade gccUpgrade gcc-gfortran-debuginfoUpgrade libubsan-debuginfoUpgrade gcc-gdb-pluginUpgrade libatomicUpgrade libstdc++-develUpgrade libgomp-offload-nvptxUpgrade gcc-debuginfoUpgrade libitm-develUpgrade libgompUpgrade libatomic-debuginfoUpgrade libgcc-debuginfoUpgrade cppUpgrade gcc-c++-debuginfoUpgrade libgfortranUpgrade gcc-c++Upgrade gcc-debugsourceUpgrade liblsan-debuginfoUpgrade libstdc++-staticUpgrade gcc-gfortranUpgrade libasanUpgrade libgomp-offload-nvptx-debuginfoUpgrade libitmUpgrade libgomp-debuginfoUpgrade gcc-offload-nvptxUpgrade libstdc++-docsUpgrade gcc-plugin-devel-debuginfoUpgrade libubsanUpgrade libquadmath-debuginfoUpgrade cpp-debuginfoUpgrade libquadmath-develUpgrade libtsanUpgrade libasan-debuginfoUpgrade libgfortran-debuginfoUpgrade gcc-offload-nvptx-debuginfoNo solution existsUpgrade libstdc++Upgrade gcc-plugin-develUpgrade libquadmathUpgrade libitm-debuginfoUpgrade libstdc++-debuginfoUpgrade libgccUpgrade gcc-gdb-plugin-debuginfoUpgrade libatomic-static | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade libgomp-debuginfoUpgrade gcc-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libgomp-offload-nvptxUpgrade gcc-gfortran-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libatomic-staticUpgrade libasan-debuginfoUpgrade libtsanUpgrade libstdc++-debuginfoUpgrade gcc-plugin-develUpgrade libgompUpgrade libatomic-debuginfoUpgrade libtsan-debuginfoUpgrade libquadmathUpgrade libstdc++-develUpgrade gcc-offload-nvptx-debuginfoUpgrade gcc-gdb-pluginUpgrade libubsan-debuginfoUpgrade libstdc++-docsUpgrade gccUpgrade libubsanUpgrade gcc-offload-nvptxUpgrade gcc-debugsourceUpgrade libitmUpgrade liblsan-debuginfoUpgrade libitm-develUpgrade libgcc-debuginfoUpgrade libitm-debuginfoUpgrade libstdc++Upgrade gcc-gdb-plugin-debuginfoUpgrade libgfortran-debuginfoUpgrade libatomicUpgrade gcc-c++Upgrade libgfortranUpgrade libquadmath-debuginfoUpgrade gcc-c++-debuginfoUpgrade gcc-gfortranUpgrade libstdc++-staticUpgrade cppUpgrade libasanUpgrade libquadmath-develUpgrade libgccUpgrade cpp-debuginfoUpgrade liblsan | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub