REDHAT-BUG-1594410: Low severity binutils vulnerability

Published Jun 22, 2018

Updated

An issue was discovered in armpt in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglearmhptemplate, demangleclassname, demanglefundtype, dotype, doarg, demangleargs, and demanglenestedargs. This can occur during execution of nm-new.

References: https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763099 https://gcc.gnu.org/bugzilla/showbug.cgi?id=85452 https://sourceware.org/bugzilla/showbug.cgi?id=23058

Affected Software

1 affected component

GNU binutils

Event History

Jun 22, 2018

Data Sourced

via Red Hat·09:25 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-1594410?

The severity of REDHAT-BUG-1594410 is classified as high due to the potential for stack exhaustion leading to application crashes.

How do I fix REDHAT-BUG-1594410?

To fix REDHAT-BUG-1594410, it is recommended to upgrade to a newer patched version of GNU Binutils that addresses the stack exhaustion issue.

Which software is affected by REDHAT-BUG-1594410?

REDHAT-BUG-1594410 affects GNU Binutils versions starting from 2.30.

What is the cause of REDHAT-BUG-1594410?

The cause of REDHAT-BUG-1594410 is excessive recursion in C++ demangling functions within the GNU Libiberty library.

Is there a simple workaround for REDHAT-BUG-1594410?

Currently, there are no reliable workarounds for REDHAT-BUG-1594410 aside from applying the appropriate software updates.