CVE Vulnerabilities

CVE-2018-12698

Published: Jun 23, 2018 | Modified: Oct 03, 2019
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
3.3 LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Ubuntu
LOW

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the Create an array for saving the template argument values XNEWVEC call. This can occur during execution of objdump.

Affected Software

Name Vendor Start Version End Version
Binutils Gnu 2.30 (including) 2.30 (including)
Binutils Ubuntu artful *
Binutils Ubuntu bionic *
Binutils Ubuntu cosmic *
Binutils Ubuntu esm-infra-legacy/trusty *
Binutils Ubuntu esm-infra/xenial *
Binutils Ubuntu precise/esm *
Binutils Ubuntu trusty *
Binutils Ubuntu trusty/esm *
Binutils Ubuntu upstream *
Binutils Ubuntu xenial *
Libiberty Ubuntu artful *
Libiberty Ubuntu bionic *
Libiberty Ubuntu cosmic *
Libiberty Ubuntu disco *
Libiberty Ubuntu trusty *
Libiberty Ubuntu upstream *
Libiberty Ubuntu xenial *

References