A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/106563 | Third Party Advisory VDB Entry |
| https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 | Exploit Issue Tracking Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=24043 | Exploit Issue Tracking Third Party Advisory |
| https://support.f5.com/csp/article/K38336243 | Third Party Advisory |
| http://www.securityfocus.com/bid/106563 | Third Party Advisory VDB Entry |
| https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 | Exploit Issue Tracking Third Party Advisory |
| https://sourceware.org/bugzilla/show_bug.cgi?id=24043 | Exploit Issue Tracking Third Party Advisory |
| https://support.f5.com/csp/article/K38336243 | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/106563 - Third Party Advisory, VDB Entry | |
| References | () https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://sourceware.org/bugzilla/show_bug.cgi?id=24043 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://support.f5.com/csp/article/K38336243 - Third Party Advisory |
Information
Published : 2019-01-15 00:29
Updated : 2024-11-21 04:02
NVD link : CVE-2018-20712
Mitre link : CVE-2018-20712
CVE.ORG link : CVE-2018-20712
JSON object : View
Products Affected
gnu
- binutils
CWE
CWE-125
Out-of-bounds Read