CVE-2018-20657 | BDVDB-2026-111186 Detail

Description#

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/106444
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88539
https://support.f5.com/csp/article/K62602089
https://access.redhat.com/errata/RHSA-2019:3352

Exploit#

No public exploit known

History#

Version 12019-01-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.