PT-2017-8504 · Gnu+1 · Libiberty+1

Marcel Böhme · Published 2017-02-24 · Updated 2025-10-30 · CVE-2016-4489

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions libiberty (affected versions not specified)

Description The issue is related to an integer overflow in the gnu special function, which can be exploited by remote attackers to cause a denial of service. This is achieved through a crafted binary and is related to the demangling of virtual tables, potentially leading to a segmentation fault and crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2016-4489

DLA-552-1

MGASA-2017-0222

MGASA-2018-0034

MGASA-2018-0046

MGASA-2019-0169

USN-3337-1

USN-3367-1

USN-3368-1

USN-4336-2

Affected Products

Ubuntu

Libiberty

References · 509

• https://bdu.fstec.ru/vul/2023-07729 · Security Note
• https://ubuntu.com/security/CVE-2017-15024 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4492 · Security Note
• https://bdu.fstec.ru/vul/2019-00576 · Security Note
• https://ubuntu.com/security/CVE-2018-7643 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-10372 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-14250 · Security Note
• https://ubuntu.com/security/CVE-2017-12449 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-9745 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15025 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7227 · Security Note
• https://ubuntu.com/security/CVE-2017-9749 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-14939 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17125 · Security Note
• https://ubuntu.com/security/CVE-2017-8394 · Vendor Advisory