PT-2018-11303 · Gnu+4 · Gnu Binutils+4

Cornelius Aschermann + 1 · Published 2018-06-22 · Updated 2021-07-21 · CVE-2018-12641

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30

Description An issue was discovered in the arm pt function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils. This issue leads to stack exhaustion in the C++ demangling functions provided by libiberty. The functions involved include demangle arm hp template, demangle class name, demangle fund type, do type, do arg, demangle args, and demangle nested args. This can occur during the execution of nm-new.

Recommendations For GNU Binutils version 2.30, consider updating to a newer version to mitigate the risk of stack exhaustion in the C++ demangling functions. As a temporary workaround, consider restricting the use of the nm-new execution to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

ALT-PU-2019-1204

ALT-PU-2019-1367

CESA-2019_2075

CVE-2018-12641

RHSA-2019:2075

RHSA-2019_2075

USN-4326-1

USN-4336-1

USN-4336-2

Affected Products

Alt Linux

Centos

Gnu Binutils

Red Hat

Ubuntu

References · 487

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=23058 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20651 · Security Note
• https://ubuntu.com/security/CVE-2017-7225 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03808 · Security Note
• https://ubuntu.com/security/CVE-2018-18484 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9039 · Security Note
• https://osv.dev/vulnerability/USN-4336-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8421 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-9996 · Security Note
• https://bdu.fstec.ru/vul/2019-01234 · Security Note
• https://bdu.fstec.ru/vul/2023-07752 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-15938 · Security Note
• https://ubuntu.com/security/CVE-2017-15024 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4336-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-14130 · Security Note