7.5

CVE-2018-12698

Exploit
demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Binutils Version2.30
Canonical ≫ Ubuntu Linux Version16.04.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.69% 0.93
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://usn.ubuntu.com/4336-1/
https://usn.ubuntu.com/4326-1/
https://security.gentoo.org/glsa/201908-01
https://bugs.launchpad.net/ubuntu/+source/binutils/+bug/1763102
Third Party Advisory
Exploit
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85454
Vendor Advisory
Exploit
Issue Tracking
https://sourceware.org/bugzilla/show_bug.cgi?id=23057
Third Party Advisory
Exploit
Issue Tracking
http://www.securityfocus.com/bid/104539
Third Party Advisory
VDB Entry