An issue was discovered in GNU libiberty as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.

🗓️ 25 Sep 2020 00:00:00Reported by MicrosoftType

Heap-based buffer over-read in d_expression_1 of cp-demangle.c after many recursive calls in libiberty (Binutils 2.32).

Reporter	Title	Published	Views	Family All 68
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.	20 Oct 202015:39	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local	20 Dec 201913:52	–	ibm
AstraLinux	Astra Linux - уязвимость в binutils	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the d_expression_1 function in the libiberty/cp-demangle.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.	20 Jul 202300:00	–	bdu_fstec
CBLMariner	CVE-2019-9070 affecting package binutils 2.32-5	9 Sep 202006:09	–	cbl_mariner
Cloud Foundry	USN-4336-1: GNU binutils vulnerabilities \| Cloud Foundry	14 May 202000:00	–	cloudfoundry
CNVD	GNU Binutils libiberty heap buffer overflow vulnerability (CNVD-2019-22418)	26 Feb 201900:00	–	cnvd
CVE	CVE-2019-9070	24 Feb 201900:00	–	cve
Cvelist	CVE-2019-9070	24 Feb 201900:00	–	cvelist