CVE-2018-20712: Medium severity binutils vulnerability
Published Jan 15, 2019
·Updated
A heap-based buffer over-read exists in the function dexpression1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.
Affected Software
1 affected component
GNU binutils=2.31.1
Event History
Jan 15, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-20712?
CVE-2018-20712 has been classified as a moderate severity vulnerability.
2
How does CVE-2018-20712 affect GNU Binutils?
CVE-2018-20712 can lead to segmentation faults and denial-of-service conditions due to a heap-based buffer over-read.
3
Which version of GNU Binutils is affected by CVE-2018-20712?
CVE-2018-20712 specifically affects GNU Binutils version 2.31.1.
4
What is the cause of the vulnerability in CVE-2018-20712?
The vulnerability in CVE-2018-20712 stems from the function d_expression_1 in cp-demangle.c handling crafted input improperly.
5
How can I mitigate CVE-2018-20712?
To mitigate CVE-2018-20712, it's recommended to upgrade to a patched version of GNU Binutils following security updates.