Ubuntu.comUB:CVE-2018-12934CVE-2018-12934
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
77.9%
remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU
Binutils 2.30, allows attackers to trigger excessive memory consumption
(aka OOM). This can occur during execution of cxxfilt.
Bugs
- <https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85453>
- <https://gcc.gnu.org/bugzilla/show_bug.cgi?id=84950>
- <https://sourceware.org/bugzilla/show_bug.cgi?id=23059>
- <https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763101>
Notes
| Author | Note |
|---|---|
| mdeslaur | issue is actually in libiberty |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | binutils | < 2.30-21ubuntu1~18.04.3 | UNKNOWN |
| ubuntu | 14.04 | noarch | binutils | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | binutils | < 2.26.1-1ubuntu1~16.04.8+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only | UNKNOWN |
| ubuntu | 18.04 | noarch | libiberty | < 20170913-1ubuntu0.1 | UNKNOWN |
| ubuntu | 16.04 | noarch | libiberty | < 20160215-1ubuntu0.3 | UNKNOWN |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.006 Low
EPSS
Percentile
77.9%