Gnu · Gnu Binutils · CVE-2018-20657
Name of the Vulnerable Software and Affected Versions:
GNU Binutils version 2.31.1
Description:
The issue is related to a memory leak in the demangle template function in cplus-dem.c, which can lead to a denial of service due to memory consumption when a crafted string is processed. This can be demonstrated using cxxfilt.
Recommendations:
For GNU Binutils version 2.31.1, consider updating to a newer version to mitigate the risk of memory consumption due to the memory leak in the demangle template function. At the moment, there is no information about a newer version that contains a fix for this vulnerability.