Wind River Support Network

HomeDefectsLIN1018-2840
Fixed

LIN1018-2840 : Security Advisory - binutils - CVE-2018-18701

Created: Oct 30, 2018    Updated: Sep 13, 2022
Resolved Date: Jan 10, 2019
Found In Version: unknown
Fix Version: 10.18.44.3
Severity: Standard
Applicable for: Wind River Linux LTS 18
Component/s: Userspace

Description

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions next_is_type_qual() and cplus_demangle_type() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.

https://nvd.nist.gov/vuln/detail/CVE-2018-18701

CVEs


Live chat
Online