CVE-2018-9138 — Uncontrolled Recursion in Binutils
Severity
5.5MEDIUMNVD
EPSS
0.3%
top 46.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 30
Latest updateMay 13
Description
An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages2 packages
🔴Vulnerability Details
3📋Vendor Advisories
5Red Hat
▶
Debian▶
CVE-2018-9138: binutils - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU B...↗2018
💬Community
4Bugzilla▶
CVE-2018-9138 binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty [fedora-all]↗2018-04-05
Bugzilla▶
CVE-2018-9138 mingw-binutils: binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty [fedora-all]↗2018-04-05
Bugzilla▶
CVE-2018-9138 binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty↗2018-04-05
Bugzilla▶
CVE-2018-9138 mingw-binutils: binutils: Stack Exhaustion in the the C++ demangling functions provided by libiberty [epel-all]↗2018-04-05