CVE-2018-18700

Published: Oct 29, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

Affected (1)

Products: Gnu: Binutils

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Version 2.31

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (6)

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://usn.ubuntu.com/4326-1/

Source: cve@mitre.org

https://usn.ubuntu.com/4336-1/

Source: cve@mitre.org

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

https://usn.ubuntu.com/4326-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4336-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.