PT-2018-2451 · Gnu+2 · Gnu Binutils+2

慕冬亮 · Published 2018-03-02 · Updated 2026-04-20 · CVE-2018-9996

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.30

Description The issue is related to stack exhaustion in the C++ demangling functions provided by libiberty, specifically in the demangle template value parm, demangle integral value, and demangle expression functions. This can lead to a denial of service.

Recommendations For GNU Binutils version 2.30, consider updating to a newer version that addresses this issue. As a temporary workaround, restrict the use of the demangling functions to minimize the risk of exploitation.

Exploit

Fix

Uncontrolled Recursion

Weakness Enumeration

CWE-674

CWE-399

Related Identifiers

ALT-PU-2019-1204

ALT-PU-2019-1367

BDU:2019-00673

CVE-2018-9996

ECHO-536F-33FE-97EE

Affected Products

Alt Linux

Debian

Gnu Binutils

References · 9

• 🔥 https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304 · Exploit
• https://bdu.fstec.ru/vul/2019-00673 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-9996 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-9996 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2018-9996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-9996 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2018-9996 · Vendor Advisory
• http://securityfocus.com/bid/103733 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssb-439005.pdf · Note