Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2018-17985
HistoryOct 04, 2018 - 11:29 p.m.

CVE-2018-17985

2018-10-0423:29:00
CWE-400
[email protected]
web.nvd.nist.gov
128
security
issue
gnu
libiberty
binutils
cve-2018-17985
stack consumption
recursive calls
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption problem caused by the cplus_demangle_type function making recursive calls to itself in certain scenarios involving many ‘P’ characters.

Affected configurations

NVD
Node
gnubinutilsMatch2.31
CPENameOperatorVersion
gnu:binutilsgnu binutilseq2.31

Related

prion 1
nvd 1
osv 2
veracode 1
cvelist 1
f5 1
redhatcve 1
debiancve 1
ubuntucve 1
cloudlinux 2
nessus 16
openvas 8
ubuntu 3
suse 2
ibm 6
cloudfoundry 1
photon 2
prion
prion
Code injection
2018-10-04 23:29:00
nvd
nvd
CVE-2018-17985
2018-10-04 23:29:00
osv
osv
CVE-2018-17985
2018-10-04 23:29:00
binutils vulnerabilities
2021-07-21 13:08:04
veracode
veracode
Denial Of Service (DoS)
2020-09-21 06:36:13
cvelist
cvelist
CVE-2018-17985
2018-10-04 23:00:00
f5
f5
K35710418 : Binutils vulnerability CVE-2018-17985
2018-12-28 00:00:00
redhatcve
redhatcve
CVE-2018-17985
2020-04-06 17:08:08
debiancve
debiancve
CVE-2018-17985
2018-10-04 23:29:00
ubuntucve
ubuntucve
CVE-2018-17985
2018-10-04 00:00:00
cloudlinux
cloudlinux
Fix of 14 CVEs
2022-01-11 12:27:33
Fix of CVE: CVE-2021-45078, CVE-2018-9138, CVE-2018-17985, CVE-2018-12641, CVE-2018-12699, CVE-2018-12698, CVE-2018-12697, CVE-2018-12700, CVE-2018-18484, CVE-2018-18701, CVE-2018-12934, CVE-2018-18700, CVE-2018-17794, CVE-2018-18483
2021-12-29 15:09:05
nessus
nessus
Ubuntu 16.04 LTS / 18.04 LTS : libiberty vulnerabilities (USN-4326-1)
2020-04-10 00:00:00
SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2019:2650-1)
2019-10-15 00:00:00
openSUSE Security Update : binutils (openSUSE-2019-2415)
2019-10-31 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-4326-1)
2020-04-09 00:00:00
SUSE: Security Advisory (SUSE-SU-2019:2650-1)
2021-04-19 00:00:00
openSUSE: Security Advisory for binutils (openSUSE-SU-2019:2432-1)
2020-01-09 00:00:00
ubuntu
ubuntu
libiberty vulnerabilities
2020-04-08 00:00:00
GNU binutils vulnerabilities
2020-04-22 00:00:00
GNU binutils vulnerabilities
2021-07-21 00:00:00
suse
suse
Security update for binutils (moderate)
2019-10-30 00:00:00
Security update for binutils (moderate)
2019-11-05 00:00:00
ibm
ibm
Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Platform Software clients.
2020-07-23 09:47:08
Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics
2021-01-13 15:48:56
Security Bulletin: Multiple Vulnerabilities in GNU Binutils affects Watson Studio Local
2019-12-20 13:52:21
cloudfoundry
cloudfoundry
USN-4336-1: GNU binutils vulnerabilities | Cloud Foundry
2020-05-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0414
2023-06-20 00:00:00
Critical Photon OS Security Update - PHSA-2023-3.0-0601
2023-06-20 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON
Related for CVE-2018-17985
prion1nvd1osv2veracode1cvelist1f51redhatcve1debiancve1ubuntucve1cloudlinux2nessus16openvas8ubuntu3suse2ibm6cloudfoundry1photon2