CVE-2018-18701

Published: Oct 29, 2018Modified: Nov 21, 2024

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

Affected (1)

Products: Gnu: Binutils

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Version 2.31

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (6)

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675

Source: cve@mitre.org

ExploitIssue TrackingVendor Advisory

https://usn.ubuntu.com/4326-1/

Source: cve@mitre.org

https://usn.ubuntu.com/4336-1/

Source: cve@mitre.org

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87675

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingVendor Advisory

https://usn.ubuntu.com/4326-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/4336-1/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.