CVE-2018-12641: Medium severity binutils vulnerability
An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglearmhptemplate, demangleclassname, demanglefundtype, dotype, doarg, demangleargs, and demanglenestedargs. This can occur during execution of nm-new.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-12641?
CVE-2018-12641 is an issue discovered in arm_pt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, which can lead to a stack exhaustion vulnerability in the C++ demangling functions provided by libiberty.
What is the severity of CVE-2018-12641?
CVE-2018-12641 has a severity level of low.
How does CVE-2018-12641 affect the software?
CVE-2018-12641 affects GNU Binutils 2.30, 2.30.90.20180627-1, 2.30-21ubuntu1~18.04.3, 2.26.1-1ubuntu1~16.04.8+, as well as libiberty packages with versions 20170913-1ubuntu0.1, 20190122-1, and 20160215-1ubuntu0.3.
How can CVE-2018-12641 be fixed?
To fix CVE-2018-12641, update to the latest version of GNU Binutils and libiberty packages mentioned in the affected software list.
Where can I find more information about CVE-2018-12641?
You can find more information about CVE-2018-12641 in the following references: [1] [2] [3].