The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-cppalma-upgrade-gccalma-upgrade-gcc-c++alma-upgrade-gcc-gdb-pluginalma-upgrade-gcc-gfortranalma-upgrade-gcc-offload-nvptxalma-upgrade-gcc-plugin-develalma-upgrade-libitm-develalma-upgrade-libquadmath-develalma-upgrade-libstdc++-develalma-upgrade-libstdc++-docsalma-upgrade-libstdc++-static | May 4, 2022 | Jan 4, 2019 | |
| Centos_linux | — | centos-upgrade-cppcentos-upgrade-cpp-debuginfocentos-upgrade-gcccentos-upgrade-gcc-ccentos-upgrade-gcc-c-debuginfocentos-upgrade-gcc-debuginfocentos-upgrade-gcc-debugsourcecentos-upgrade-gcc-gdb-plugincentos-upgrade-gcc-gdb-plugin-debuginfocentos-upgrade-gcc-gfortrancentos-upgrade-gcc-gfortran-debuginfocentos-upgrade-gcc-plugin-devel-debuginfocentos-upgrade-libasancentos-upgrade-libasan-debuginfocentos-upgrade-libatomiccentos-upgrade-libatomic-debuginfocentos-upgrade-libatomic-staticcentos-upgrade-libgcccentos-upgrade-libgcc-debuginfocentos-upgrade-libgfortrancentos-upgrade-libgfortran-debuginfocentos-upgrade-libgompcentos-upgrade-libgomp-debuginfocentos-upgrade-libitmcentos-upgrade-libitm-debuginfocentos-upgrade-libitm-develcentos-upgrade-libstdccentos-upgrade-libstdc-debuginfocentos-upgrade-libstdc-develcentos-upgrade-libstdc-docscentos-upgrade-libubsancentos-upgrade-libubsan-debuginfo | Nov 10, 2021 | Jan 4, 2019 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jan 4, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-binutilshuawei-euleros-2_0_sp8-upgrade-binutils-devel | Feb 26, 2020 | Jan 4, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-cpporacle-linux-upgrade-gccoracle-linux-upgrade-gcc-coracle-linux-upgrade-gcc-gdb-pluginoracle-linux-upgrade-gcc-gfortranoracle-linux-upgrade-gcc-offload-nvptxoracle-linux-upgrade-gcc-plugin-develoracle-linux-upgrade-libasanoracle-linux-upgrade-libatomicoracle-linux-upgrade-libatomic-staticoracle-linux-upgrade-libgccoracle-linux-upgrade-libgfortranoracle-linux-upgrade-libgomporacle-linux-upgrade-libgomp-offload-nvptxoracle-linux-upgrade-libitmoracle-linux-upgrade-libitm-develoracle-linux-upgrade-liblsanoracle-linux-upgrade-libquadmathoracle-linux-upgrade-libquadmath-develoracle-linux-upgrade-libstdcoracle-linux-upgrade-libstdc-develoracle-linux-upgrade-libstdc-docsoracle-linux-upgrade-libstdc-staticoracle-linux-upgrade-libtsanoracle-linux-upgrade-libubsan | Nov 17, 2021 | Dec 27, 2018 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-cppredhat-upgrade-cpp-debuginforedhat-upgrade-gccredhat-upgrade-gcc-credhat-upgrade-gcc-c-debuginforedhat-upgrade-gcc-debuginforedhat-upgrade-gcc-debugsourceredhat-upgrade-gcc-gdb-pluginredhat-upgrade-gcc-gdb-plugin-debuginforedhat-upgrade-gcc-gfortranredhat-upgrade-gcc-gfortran-debuginforedhat-upgrade-gcc-offload-nvptxredhat-upgrade-gcc-offload-nvptx-debuginforedhat-upgrade-gcc-plugin-develredhat-upgrade-gcc-plugin-devel-debuginforedhat-upgrade-libasanredhat-upgrade-libasan-debuginforedhat-upgrade-libatomicredhat-upgrade-libatomic-debuginforedhat-upgrade-libatomic-staticredhat-upgrade-libgccredhat-upgrade-libgcc-debuginforedhat-upgrade-libgfortranredhat-upgrade-libgfortran-debuginforedhat-upgrade-libgompredhat-upgrade-libgomp-debuginforedhat-upgrade-libgomp-offload-nvptxredhat-upgrade-libgomp-offload-nvptx-debuginforedhat-upgrade-libitmredhat-upgrade-libitm-debuginforedhat-upgrade-libitm-develredhat-upgrade-liblsanredhat-upgrade-liblsan-debuginforedhat-upgrade-libquadmathredhat-upgrade-libquadmath-debuginforedhat-upgrade-libquadmath-develredhat-upgrade-libstdcredhat-upgrade-libstdc-debuginforedhat-upgrade-libstdc-develredhat-upgrade-libstdc-docsredhat-upgrade-libstdc-staticredhat-upgrade-libtsanredhat-upgrade-libtsan-debuginforedhat-upgrade-libubsanredhat-upgrade-libubsan-debuginfo | Nov 10, 2021 | Jan 4, 2019 | |
| Rocky_linux | rocky-upgrade-cpprocky-upgrade-cpp-debuginforocky-upgrade-gccrocky-upgrade-gcc-c++rocky-upgrade-gcc-c++-debuginforocky-upgrade-gcc-debuginforocky-upgrade-gcc-debugsourcerocky-upgrade-gcc-gdb-pluginrocky-upgrade-gcc-gdb-plugin-debuginforocky-upgrade-gcc-gfortranrocky-upgrade-gcc-gfortran-debuginforocky-upgrade-gcc-offload-nvptxrocky-upgrade-gcc-offload-nvptx-debuginforocky-upgrade-gcc-plugin-develrocky-upgrade-gcc-plugin-devel-debuginforocky-upgrade-libasanrocky-upgrade-libasan-debuginforocky-upgrade-libatomicrocky-upgrade-libatomic-debuginforocky-upgrade-libatomic-staticrocky-upgrade-libgccrocky-upgrade-libgcc-debuginforocky-upgrade-libgfortranrocky-upgrade-libgfortran-debuginforocky-upgrade-libgomprocky-upgrade-libgomp-debuginforocky-upgrade-libgomp-offload-nvptxrocky-upgrade-libgomp-offload-nvptx-debuginforocky-upgrade-libitmrocky-upgrade-libitm-debuginforocky-upgrade-libitm-develrocky-upgrade-liblsanrocky-upgrade-liblsan-debuginforocky-upgrade-libquadmathrocky-upgrade-libquadmath-debuginforocky-upgrade-libquadmath-develrocky-upgrade-libstdc++rocky-upgrade-libstdc++-debuginforocky-upgrade-libstdc++-develrocky-upgrade-libstdc++-docsrocky-upgrade-libstdc++-staticrocky-upgrade-libtsanrocky-upgrade-libtsan-debuginforocky-upgrade-libubsanrocky-upgrade-libubsan-debuginfo | Mar 12, 2024 | Jan 4, 2019 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jan 4, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub