Lucene search

[email protected]CVE-2019-9071

HistoryFeb 24, 2019 - 12:29 a.m.

CVE-2019-9071

2019-02-2400:29:00

CWE-674

[email protected]

web.nvd.nist.gov

cve-2019-9071

gnu libiberty

stack consumption

d_count_templates_scopes

cp-demangle.c

nvd

binutils 2.32

recursive calls

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

53.2%

JSON

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.

CPENameOperatorVersion
gnu:binutilsgnu binutilseq2.32
netapp:solidfirenetapp solidfireeq-
netapp:hci_management_nodenetapp hci management nodeeq-
canonical:ubuntu_linuxcanonical ubuntu linuxeq18.04

CPE	Name	Operator	Version
gnu:binutils	gnu binutils	eq	2.32
netapp:solidfire	netapp solidfire	eq	-
netapp:hci_management_node	netapp hci management node	eq	-
canonical:ubuntu_linux	canonical ubuntu linux	eq	18.04