A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Binutils | Gnu | 2.36 (including) | 2.36 (including) |
| Binutils | Ubuntu | hirsute | * |
| Binutils | Ubuntu | impish | * |
| Binutils | Ubuntu | precise/esm | * |
| Binutils | Ubuntu | trusty | * |
| Binutils | Ubuntu | xenial | * |
| Gdb | Ubuntu | bionic | * |
| Gdb | Ubuntu | jammy | * |
| Gdb | Ubuntu | trusty | * |
| Gdb | Ubuntu | xenial | * |
| Libiberty | Ubuntu | hirsute | * |
| Libiberty | Ubuntu | impish | * |
| Libiberty | Ubuntu | jammy | * |
| Libiberty | Ubuntu | trusty | * |
| Libiberty | Ubuntu | xenial | * |