CVE-2018-20657
Fixed in a distro release EPSS 4%
The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.
Products: gnu binutils, f5 traffix_signaling_delivery_controller
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8 | gdb | 0:8.2-6.el8 |
| Red Hat Enterprise Linux 8 | gdb-debuginfo | 0:8.2-6.el8 |
| Red Hat Enterprise Linux 8 | gdb-debugsource | 0:8.2-6.el8 |
| Red Hat Enterprise Linux 8 | gdb-doc | 0:8.2-6.el8 |
| Red Hat Enterprise Linux 8 | gdb-gdbserver | 0:8.2-6.el8 |
| Red Hat Enterprise Linux 8 | gdb-headless | 0:8.2-6.el8 |
| Ubuntu Pro 14.04 LTS | binutils | no fix |
| Ubuntu Pro 16.04 LTS | binutils | no fix |
| Ubuntu Pro 18.04 LTS | binutils | no fix |