PT-2017-8504 · Gnu+1 · Libiberty+1

Marcel Böhme · Publicado 2017-02-24 · Atualizado 2025-10-30 · CVE-2016-4489

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libiberty (affected versions not specified)

Description The issue is related to an integer overflow in the gnu special function, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted binary and is related to the demangling of virtual tables, potentially leading to a segmentation fault and crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Enumeração de Fraquezas

CWE-190

Identificadores relacionados

CVE-2016-4489

DLA-552-1

MGASA-2017-0222

MGASA-2018-0034

MGASA-2018-0046

MGASA-2019-0169

USN-3337-1

USN-3367-1

USN-3368-1

USN-4336-2

Produtos afetados

Ubuntu

Libiberty

Referências · 509

• https://bdu.fstec.ru/vul/2023-07729 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-15024 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4492 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-00576 · Nota de Segurança
• https://openwall.com/lists/oss-security/2017/10/04/6 · Nota
• https://ubuntu.com/security/CVE-2018-7643 · Aviso do Fabricante
• https://sourceware.org/bugzilla/show_bug.cgi?id=22769 · Nota
• https://ubuntu.com/security/CVE-2018-10372 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14250 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-12449 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2017-9745 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15025 · Nota de Segurança
• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675 · Nota
• https://openwall.com/lists/oss-security/2017/09/30/3 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7227 · Nota de Segurança