The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gcc-offload-nvptxUpgrade libstdc++-develUpgrade gcc-gfortranUpgrade libquadmath-develUpgrade cppUpgrade libstdc++-staticUpgrade gcc-c++Upgrade gccUpgrade libstdc++-docsUpgrade libitm-develUpgrade gcc-gdb-pluginUpgrade gcc-plugin-devel | May 4, 2022 | Jan 4, 2019 |
| Centos_linux | — | Upgrade gcc-gdb-plugin-debuginfoUpgrade libasan-debuginfoUpgrade gcc-c++-debuginfoUpgrade libgcc-debuginfoUpgrade libitm-develUpgrade gcc-c++Upgrade cppUpgrade libgompUpgrade gccUpgrade gcc-gdb-pluginUpgrade gcc-debuginfoUpgrade gcc-gfortran-debuginfoUpgrade libstdc++-develUpgrade libgfortranUpgrade libasanUpgrade libatomic-debuginfoUpgrade gcc-gfortranUpgrade libstdc++-docsUpgrade libstdc++-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libgomp-debuginfoUpgrade libatomic-staticUpgrade libitmUpgrade libstdc++Upgrade gcc-debugsourceUpgrade libatomicUpgrade libubsan-debuginfoUpgrade libgfortran-debuginfoUpgrade cpp-debuginfoUpgrade libgccUpgrade libitm-debuginfoUpgrade libubsan | Nov 10, 2021 | Jan 4, 2019 |
| Debian | — | No solution exists | May 15, 2025 | Jan 4, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade binutils-develUpgrade binutils | Feb 26, 2020 | Jan 4, 2019 |
| Oracle_linux | — | Upgrade libasan-staticUpgrade gcc-plugin-develUpgrade libtsan-staticUpgrade libobjcUpgrade libquadmathUpgrade gcc-objc++Upgrade libstdc++-docsUpgrade gccUpgrade libatomic-staticUpgrade cppUpgrade libstdc++-develUpgrade libitm-staticUpgrade libgo-staticUpgrade gcc-c++Upgrade gcc-gdb-pluginUpgrade libgo-develUpgrade libgompUpgrade libstdc++Upgrade libgccUpgrade libatomicUpgrade gcc-gfortranUpgrade libquadmath-staticUpgrade libstdc++-staticUpgrade libitm | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | — | Upgrade libquadmath-develUpgrade cpp-debuginfoUpgrade libgomp-debuginfoUpgrade libquadmath-debuginfoUpgrade gcc-offload-nvptx-debuginfoUpgrade libstdc++-debuginfoUpgrade gcc-gdb-plugin-debuginfoUpgrade libstdc++Upgrade libgccUpgrade libubsanUpgrade libtsanUpgrade libstdc++-docsUpgrade libquadmathUpgrade libatomic-staticUpgrade libgfortran-debuginfoUpgrade gcc-plugin-develUpgrade libasan-debuginfoUpgrade gcc-plugin-devel-debuginfoUpgrade libitm-debuginfoUpgrade gcc-offload-nvptxNo solution existsUpgrade libgompUpgrade gcc-c++-debuginfoUpgrade liblsan-debuginfoUpgrade libgfortranUpgrade libgomp-offload-nvptx-debuginfoUpgrade gcc-gfortranUpgrade libstdc++-staticUpgrade libasanUpgrade libatomic-debuginfoUpgrade gcc-c++Upgrade gcc-debugsourceUpgrade cppUpgrade libgcc-debuginfoUpgrade gcc-gdb-pluginUpgrade libstdc++-develUpgrade libgomp-offload-nvptxUpgrade libtsan-debuginfoUpgrade libatomicUpgrade libitmUpgrade gcc-gfortran-debuginfoUpgrade gccUpgrade libitm-develUpgrade libubsan-debuginfoUpgrade liblsanUpgrade gcc-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Rocky_linux | — | Upgrade libquadmath-debuginfoUpgrade cpp-debuginfoUpgrade libgfortranUpgrade libgccUpgrade cppUpgrade libatomicUpgrade libasanUpgrade gcc-c++Upgrade gcc-gfortranUpgrade libstdc++-staticUpgrade gcc-c++-debuginfoUpgrade libgfortran-debuginfoUpgrade liblsanUpgrade libquadmath-develUpgrade libubsan-debuginfoUpgrade libstdc++-docsUpgrade libstdc++-develUpgrade gcc-gdb-plugin-debuginfoUpgrade libubsanUpgrade libstdc++Upgrade gcc-gfortran-debuginfoUpgrade libtsanUpgrade libstdc++-debuginfoUpgrade libgompUpgrade gcc-plugin-develUpgrade gcc-plugin-devel-debuginfoUpgrade libgomp-offload-nvptx-debuginfoUpgrade gcc-debuginfoUpgrade libgomp-debuginfoUpgrade libasan-debuginfoUpgrade libgomp-offload-nvptxUpgrade libquadmathUpgrade libtsan-debuginfoUpgrade libatomic-debuginfoUpgrade libitm-develUpgrade gcc-offload-nvptx-debuginfoUpgrade gcc-gdb-pluginUpgrade libgcc-debuginfoUpgrade gccUpgrade gcc-offload-nvptxUpgrade liblsan-debuginfoUpgrade libitmUpgrade libatomic-staticUpgrade libitm-debuginfoUpgrade gcc-debugsource | Mar 12, 2024 | Jan 4, 2019 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jan 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub