Lucene search
+L

463 matches found

Cvelist
Cvelist
added 2018/03/30 8:0 a.m.40 views

CVE-2018-9138

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demanglenestedargs, demangleargs, doarg, and dotype...

6.1AI score0.01057EPSS
SaveExploits0References3
CVE
CVE
added 2018/03/30 8:0 a.m.100 views

CVE-2018-9138

CVE-2018-9138 affects GNU Binutils’ libiberty code, specifically cplus-dem.c, with stack exhaustion caused by recursive C++ demangling frames (demangle_nested_args, demangle_args, do_arg, do_type) in GNU Binutils 2.29 and 2.30. Connected documents reference this issue and indicate a fix has been ...

5.5CVSS6.1AI score0.01057EPSS
SaveExploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2017/08/31 3:18 p.m.29 views

CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

7.1CVSS5.5AI score0.01399EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/29 12:0 a.m.8 views

GNU Binutils C++ symbol demangler routine denial of service vulnerability

GNU Binutils a.k.a. GNU Binary Utilities or binutils is a set of programming language utilities developed by the GNU Project to work with target files in a variety of formats, with connectors, assemblers, and other tools for working with target files and archives. libiberty is one of the librarie...

7.1CVSS5.3AI score0.01399EPSS
SaveExploits0References1
Prion
Prion
added 2017/08/28 9:29 p.m.26 views

Design/Logic Flaw

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

7.1CVSS6.7AI score0.01399EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2017/08/28 9:29 p.m.9 views

UBUNTU-CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

5.5CVSS6.4AI score0.01399EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2017/08/28 9:29 p.m.55 views

CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

7.1CVSS6.5AI score0.01399EPSS
SaveExploits0References1
OSV
OSV
added 2017/08/28 9:29 p.m.29 views

CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

5.5CVSS6.5AI score
SaveExploits0References1
OSV
OSV
added 2017/08/28 9:29 p.m.5 views

DEBIAN-CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

5.5CVSS5.8AI score0.01399EPSS
SaveExploits0References1
CVE
CVE
added 2017/08/28 9:0 p.m.166 views

CVE-2017-13716

The CVE-2017-13716 vulnerability affects the C++ demangler in cplus-dem.c (libiberty) as distributed in GNU Binutils 2.29. It allows remote attackers to trigger a denial of service through a crafted file, demonstrated via a call from the Binary File Descriptor (BFD) library. No remediation or pat...

7.1CVSS5.7AI score0.01399EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2017/08/28 9:0 p.m.65 views

CVE-2017-13716

The C++ symbol demangler routine in cplus-dem.c in libiberty, as distributed in GNU Binutils 2.29, allows remote attackers to cause a denial of service excessive memory allocation and application crash via a crafted file, as demonstrated by a call from the Binary File Descriptor BFD library aka...

7.1CVSS5.8AI score0.01399EPSS
SaveExploits0
zdt
zdt
added 2017/07/28 12:0 a.m.83 views

GNU libiberty - Buffer Overflow Exploit

Exploit for linux platform in category dos / poc Source: https://gcc.gnu.org/bugzilla/showbug.cgi?id=69687 The attached program binary causes a buffer overflow in cplus-dem.c when it tries to demangle specially crafted function arguments in the binary. Both the buffer size as well as the buffer...

6.8CVSS6.4AI score0.07267EPSS
SaveExploits2
Tenable Nessus
Tenable Nessus
added 2017/07/27 12:0 a.m.34 views

Ubuntu 14.04 LTS / 16.04 LTS : libiberty vulnerabilities (USN-3368-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3368-1 advisory. It was discovered that libiberty incorrectly handled certain string operations. If a user or automated system were tricked into processing a...

7.8CVSS6.7AI score0.07267EPSS
SaveExploits2References10
Exploit DB
Exploit DB
added 2017/07/27 12:0 a.m.35 views

GNU libiberty - Buffer Overflow

Source: https://gcc.gnu.org/bugzilla/showbug.cgi?id=69687 The attached program binary causes a buffer overflow in cplus-dem.c when it tries to demangle specially crafted function arguments in the binary. Both the buffer size as well as the buffer content are controlled from the binary. objdump -x...

7.8CVSS7.4AI score0.07267EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2017/07/27 12:0 a.m.31 views

Ubuntu: Security Advisory (USN-3368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS5.7AI score0.07267EPSS
SaveExploits2References2
exploitpack
exploitpack
added 2017/07/27 12:0 a.m.25 views

GNU libiberty - Buffer Overflow

GNU libiberty - Buffer Overflow Source: https://gcc.gnu.org/bugzilla/showbug.cgi?id=69687 The attached program binary causes a buffer overflow in cplus-dem.c when it tries to demangle specially crafted function arguments in the binary. Both the buffer size as well as the buffer content are...

0.1AI score
SaveExploits0
Ubuntu
Ubuntu
added 2017/07/26 4:45 p.m.86 views

USN-3368-1: libiberty vulnerabilities

It was discovered that libiberty incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrar...

7.8CVSS6.2AI score0.07267EPSS
SaveExploits2
OSV
OSV
added 2017/07/26 4:45 p.m.15 views

USN-3368-1 libiberty vulnerabilities

It was discovered that libiberty incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrar...

7.8CVSS5.8AI score0.07267EPSS
SaveExploits2References10
Prion
Prion
added 2017/02/24 8:59 p.m.15 views

Design/Logic Flaw

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, related to "ktypevec."...

4.3CVSS6.8AI score0.0168EPSS
SaveExploits0References3
NVD
NVD
added 2017/02/24 8:59 p.m.16 views

CVE-2016-4487

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, related to "btypevec."...

5.5CVSS6AI score0.01672EPSS
SaveExploits0References3
Rows per page
Query Builder