CVE-2018-12698

Source
https://cve.org/CVERecord?id=CVE-2018-12698
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12698.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-12698
Downstream
Published
2018-06-23T23:29:00.283Z
Modified
2026-07-08T05:52:15.798986552Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Database specific
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:canonical:ubuntu_linux:16.04.4:*:*:*:*:*:*:*"
            ],
            "vendor_product": "canonical:ubuntu_linux",
            "extracted_events": [
                {
                    "introduced": "16.04.4"
                },
                {
                    "last_affected": "16.04.4"
                }
            ]
        }
    ]
}
References

Affected packages

Git / sourceware.org/git/binutils-gdb.git

Affected ranges

Type
GIT
Repo
https://sourceware.org/git/binutils-gdb.git
Events
Introduced
8db5daf9efe8a6174d3b10ac7bba8c178836e9ce
Last affected
8db5daf9efe8a6174d3b10ac7bba8c178836e9ce
Database specific
{
    "cpe": "cpe:2.3:a:gnu:binutils:2.30:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "2.30"
        },
        {
            "last_affected": "2.30"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.30
Other
binutils-2_30

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12698.json"