PT-2018-3964 · Gnu+1 · Gnu Binutils+1

Publicado

2018-10-21

·

Atualizado

2021-07-21

·

CVE-2018-18701

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31
Description An issue in cp-demangle.c of GNU libiberty, distributed in GNU Binutils, involves a stack consumption vulnerability due to infinite recursion in the next is type qual() and cplus demangle type() functions. This allows remote attackers to cause a denial-of-service via a specially crafted ELF file.
Recommendations For GNU Binutils version 2.31, consider disabling the next is type qual() and cplus demangle type() functions in cp-demangle.c as a temporary workaround to minimize the risk of exploitation. Restrict access to handling ELF files to reduce the risk of a denial-of-service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Infinite Loop

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-835

Identificadores relacionados

BDU:2023-07793
CVE-2018-18701
USN-4326-1
USN-4336-1
USN-4336-2

Produtos afetados

Gnu Binutils
Ubuntu