CVE-2018-18700: Medium severity GNU binutils vulnerability
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions dname(), dencoding(), and dlocalname() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
Other sources
GNU Binutils is vulnerable to a denial of service, caused by a stack consumption in cp-demangle.c in GNU libiberty. By persuading a victim to open a specially-crafted file, a remote attacker could exploit this vulnerability to cause the application to crash.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2018-18700.
What software is affected by this vulnerability?
The affected software includes GNU Binutils versions 2.31 and older.
What is the severity of CVE-2018-18700?
The severity of CVE-2018-18700 is not specified in the provided information.
How can I fix the vulnerability in GNU Binutils?
You can fix the vulnerability in GNU Binutils by updating to a version newer than 2.31.
Are there any references for further information about this vulnerability?
Yes, you can find more information about this vulnerability at the following references: [https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681](https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87681), [https://usn.ubuntu.com/4326-1/](https://usn.ubuntu.com/4326-1/), [https://usn.ubuntu.com/4336-1/](https://usn.ubuntu.com/4336-1/)