CVE-2018-12698

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Database specific

{
    "unresolved_ranges": [
        {
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04.4:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "16.04.4"
                },
                {
                    "last_affected": "16.04.4"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "canonical:ubuntu_linux"
        }
    ]
}

References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type

GIT

Repo

https://sourceware.org/git/binutils-gdb.git

Events

Introduced

8db5daf9efe8a6174d3b10ac7bba8c178836e9ce

Last Affected

8db5daf9efe8a6174d3b10ac7bba8c178836e9ce

Database specific

Show details

{
    "cpe": "cpe:2.3:a:gnu:binutils:2.30:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.30"
        },
        {
            "last_affected": "2.30"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*

2.30

Other

binutils-2_30

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-12698.json"