CVE-2018-12934

Description

remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.7

Associated Vulnerability

Vulnerability	OS Platform
library of utility functions used by GNU programs (USN-4326-1) libiberty-dev_20160215-1ubuntu0.3_i386.deb	Linux
library of utility functions used by GNU programs (USN-4326-1) libiberty-dev_20160215-1ubuntu0.3_amd64.deb	Linux
library of utility functions used by GNU programs (USN-4326-1) libiberty-dev_20170913-1ubuntu0.1_i386.deb	Linux
library of utility functions used by GNU programs (USN-4326-1) libiberty-dev_20170913-1ubuntu0.1_amd64.deb	Linux
GNU assembler, linker and binary utilities (USN-4336-1) binutils_2.30-21ubuntu1~18.04.3_i386.deb	Linux
GNU assembler, linker and binary utilities (USN-4336-1) binutils_2.30-21ubuntu1~18.04.3_amd64.deb	Linux
GNU assembler, linker and binary utilities (USN-4336-1) binutils-multiarch_2.30-21ubuntu1~18.04.3_i386.deb	Linux
GNU assembler, linker and binary utilities (USN-4336-1) binutils-multiarch_2.30-21ubuntu1~18.04.3_amd64.deb	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234