CoreCVE
Back

MEDIUM

libiberty: Integer overflow in demangle_template() function

Published Jan 4, 2019

Description

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Affected products

Remediation

Red Hat statement

This issue did not affect the versions of gdb as shipped with Red Hat Enterprise Linux 7 and with Red Hat Developer Toolset 7 and 8 as they are compiled only for 64bit architectures, where the flaw is not present. This vulnerability has been rated as Low severity for Red Hat Enterprise Linux 8, as the circumstances to exploit are particularly unlikely. A crafted binary file must be passed to one of the affected tools, in a 32-bit environment, and in a scenario where the corrupted file comes from an untrusted source. In 64 bit environments, exploitation is not possible.

Metrics

Weaknesses (2)

CWE-190

Integer Overflow

CWE-787

Out-of-bounds Write

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 4, 2019
Updated Aug 5, 2024
Reserved Jan 4, 2019
Link CVE-2018-20673
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-20673
Red Hat
Severity Moderate
Public date Dec 27, 2018
Links CVE-2018-20673 - Bugzilla