Gnu · Gnu Binutils · CVE-2018-9138
**Name of the Vulnerable Software and Affected Versions**
GNU Binutils versions 2.29 through 2.30
**Description**
An issue in the C++ demangling functions provided by libiberty, specifically in the cplus-dem.c file, leads to stack exhaustion due to recursive stack frames in functions such as `demangle nested args`, `demangle args`, `do arg`, and `do type`. This can potentially allow an attacker to cause a denial of service.
**Recommendations**
For GNU Binutils versions 2.29 and 2.30, consider disabling the C++ demangling functions provided by libiberty as a temporary workaround until a patch is available. Restrict access to the vulnerable functions `demangle nested args`, `demangle args`, `do arg`, and `do type` to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.