CVE-2018-9996: Medium severity GNU binutils vulnerability

Published Apr 10, 2018

Updated

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangletemplatevalueparm, demangleintegralvalue, and demangleexpression.

Affected Software

1 affected component

GNU binutils=2.30

Event History

Apr 10, 2018

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Data Sourced

via NVD·10:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-9996?

CVE-2018-9996 has a high severity due to the stack exhaustion vulnerability in C++ demangling functions.

How do I fix CVE-2018-9996?

To fix CVE-2018-9996, upgrade GNU Binutils to a version newer than 2.30 that addresses this vulnerability.

What software is affected by CVE-2018-9996?

CVE-2018-9996 specifically affects GNU Binutils version 2.30.

What type of vulnerability is CVE-2018-9996?

CVE-2018-9996 is a stack exhaustion vulnerability that may lead to crashes or denial of service.

What components are involved in CVE-2018-9996?

CVE-2018-9996 involves the recursive stack frames in the demangling functions such as demangle_template_value_parm.