EUVD-2019-18456

Malware in sbrugna...

EUVD-2022-32431

Malicious code in bioql PyPI...

The vulnerability of the demangle_const function in the libiberty/rust-demangle.c component of the GCC compiler allows a malicious actor to cause a service failure.

The vulnerability of the demangleconst function in the libiberty/rust-demangle.c component of the GCC compiler is related to an uncontrolled recursion. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.

...

Linux Distros Unpatched Vulnerability : CVE-2022-27943

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangleconst, as demonstrated by nm-new. CVE-2022-27943 Note that Nessus relies on the...

Astra Linux – Vulnerability in GCC-12

In libiberty/rust-demangle.c within GNU GCC 11.2, stack consumption is allowed in the demangleconst function, as demonstrated by the nm-new output...

The vulnerability of the d_expression_1 function in the cp-demangle.c component of the GNU Binutils development environment, which involves reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.

The vulnerability of the dexpression1 function in the cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

demangle:FuzzTest: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6253979209105408 Project: demangle Fuzzing Engine: libFuzzer Fuzz Target: FuzzTest Job Type: libfuzzerasandemangle Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffff0 Crash State: NULL Sanitizer: address ASAN Recommended...

Low: binutils

Issue Overview: An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangletype in rust-demangle.c. CVE-2021-32256 Affected Packages: binutils Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ sectio...

The vulnerabilities of the d_name, d_encoding, and d_local_name functions in the cp-demangle.c component of the GNU Binutils development environment allow a attacker to cause a service failure.

The vulnerability of the dname, dencoding, and dlocalname functions in the cp-demangle.c component of the GNU Binutils development environment is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker who operates remotely to trigge...

The vulnerability of the cp-demangle.c component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the cp-demangle.c component in the GNU Binutils development environment is related to an uncontrolled resource consumption. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerabilities of the functions next_is_type_qual() and cplus_demangle_type() in the cp-demangle.c component of the GNU Binutils development environment allow a attacker to cause a service failure.

The vulnerability of the functions nextistypequal and cplusdemangletype in the cp-demangle.c component of the GNU Binutils development environment involves executing a loop with an unreachable exit condition. Exploiting this vulnerability allows an attacker to trigger a service failure using a...

CLSA-2023-1699381084 Fix of 5 CVEs

SECURITY UPDATE: reachable assertion failure in displaydebugnames - debian/patches/CVE-2022-35205.patch: replace assert with a warning message - CVE-2022-35205 SECURITY UPDATE: memory leak in stabdemanglev3arg - debian/patches/CVE-2022-47007.patch: free dt on failure path - CVE-2022-47007 SECURIT...

CLSA-2023-1699380175 Fix CVE(s): CVE-2022-47011, CVE-2022-47007, CVE-2022-47010, CVE-2022-47008

SECURITY UPDATE: memory leak in stabdemanglev3arg - debian/patches/CVE-2022-47007.patch: free dt on failure path - CVE-2022-47007 SECURITY UPDATE: memory leak in maketempdir - debian/patches/CVE-2022-47008.patch: free template on all failure paths - CVE-2022-47008 SECURITY UPDATE: memory leak in...

libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlanglname function in d-demangle.c leads to a denial of service...

The vulnerability of the ` stab_demangle_v3_arg` function in the GNU Binutils development tool, which allows a hacker to trigger a service failure.

The vulnerability of the stabdemanglev3arg function in the GNU Binutils development toolset is related to memory release errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

DEBIAN-CVE-2022-47007

An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

AZL-28045 CVE-2022-47007 affecting package binutils for versions less than 2.37-9

An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

UBUNTU-CVE-2022-47007

An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks...

GNU Binutils 安全漏洞

GNU Binutils is a set of tools for working with binary files. GNU Binutils has a memory leak vulnerability that originates from a memory leak in the stabdemanglev3arg function in the stabs.c file. An attacker could exploit this vulnerability to cause a denial of service...