Description
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
CVSS breakdown
CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- gnu / binutils2.31 – 2.31
References
- MISChttps://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4326-1/
- VENDOR_ADVISORYhttps://usn.ubuntu.com/4336-1/
Updated 11m ago · 8 sources