The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-offload-nvptxUpgrade libstdc++-staticUpgrade gcc-gfortranUpgrade libquadmath-develUpgrade libstdc++-develUpgrade cppUpgrade gcc-plugin-develUpgrade gcc-c++Upgrade libitm-develUpgrade gcc-gdb-pluginUpgrade gccUpgrade libstdc++-docs | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade libgccUpgrade libatomic-debuginfoUpgrade libstdc++Upgrade libatomic-staticUpgrade libatomicUpgrade libstdc++-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libstdc++-docsUpgrade libubsanUpgrade libgomp-debuginfoUpgrade libitmUpgrade gcc-gfortranUpgrade libgfortran-debuginfoUpgrade cpp-debuginfoUpgrade libitm-debuginfoUpgrade libubsan-debuginfoUpgrade gcc-debugsourceUpgrade gccUpgrade libstdc++-develUpgrade cppUpgrade libgfortranUpgrade gcc-gfortran-debuginfoUpgrade gcc-gdb-pluginUpgrade gcc-debuginfoUpgrade libasan-debuginfoUpgrade gcc-c++Upgrade libgompUpgrade libitm-develUpgrade libasanUpgrade gcc-gdb-plugin-debuginfoUpgrade gcc-c++-debuginfoUpgrade libgcc-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutilsUpgrade binutils-devel | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade gcc-plugin-develUpgrade libasan-staticUpgrade libstdc++-docsUpgrade gcc-objc++Upgrade gccUpgrade libobjcUpgrade libtsan-staticUpgrade libatomic-staticUpgrade libquadmathUpgrade libstdc++-staticUpgrade libgo-staticUpgrade gcc-c++Upgrade libquadmath-staticUpgrade libitmUpgrade libitm-staticUpgrade cppUpgrade libgo-develUpgrade gcc-gdb-pluginUpgrade libgompUpgrade libstdc++-develUpgrade libatomicUpgrade libstdc++Upgrade libgccUpgrade gcc-gfortran | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade libgomp-debuginfoUpgrade libstdc++-docsUpgrade libtsanUpgrade gcc-offload-nvptx-debuginfoUpgrade libquadmath-develUpgrade cpp-debuginfoUpgrade libquadmath-debuginfoUpgrade libasan-debuginfoUpgrade libitm-debuginfoUpgrade libgccUpgrade libstdc++-debuginfoUpgrade gcc-offload-nvptxUpgrade gcc-plugin-develNo solution existsUpgrade gcc-gdb-plugin-debuginfoUpgrade libgfortran-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libubsanUpgrade libatomic-staticUpgrade libquadmathUpgrade libstdc++Upgrade gcc-gfortranUpgrade libasanUpgrade gcc-debugsourceUpgrade libgcc-debuginfoUpgrade libatomic-debuginfoUpgrade gccUpgrade liblsan-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade libatomic-staticUpgrade gcc-plugin-devel-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade libgomp-debuginfoUpgrade libgomp-offload-nvptxUpgrade gcc-debugsourceUpgrade gcc-plugin-develUpgrade libitm-debuginfoUpgrade libgompUpgrade gcc-gdb-plugin-debuginfoUpgrade libstdc++-debuginfoUpgrade libtsanUpgrade libquadmathUpgrade libstdc++-docsUpgrade libasan-debuginfoUpgrade libstdc++-develUpgrade liblsan-debuginfoUpgrade libgcc-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libtsan-debuginfoUpgrade libitm-develUpgrade gcc-gdb-pluginUpgrade libitmUpgrade gccUpgrade gcc-offload-nvptxUpgrade libatomic-debuginfoUpgrade libstdc++Upgrade libubsan-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade libubsanUpgrade gcc-debuginfoUpgrade libquadmath-debuginfoUpgrade libatomicUpgrade liblsanUpgrade gcc-c++Upgrade libgfortran-debuginfoUpgrade libgfortranUpgrade libgccUpgrade cpp-debuginfoUpgrade libquadmath-develUpgrade libasanUpgrade gcc-c++-debuginfoUpgrade gcc-gfortranUpgrade libstdc++-staticUpgrade cpp | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub