UBUNTU-CVE-2018-12698

Details

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Affected Packages

libiberty

Ubuntu 16.04 LTS

Fixed in:

20160215-1ubuntu0.3

binutils

Ubuntu 18.04 LTS

Fixed in:

2.30-21ubuntu1~18.04.3

libiberty

Ubuntu 18.04 LTS

Fixed in:

20170913-1ubuntu0.1

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm1

References

REPORT

https://ubuntu.com/security/CVE-2018-12698

ADVISORY

https://ubuntu.com/security/notices/USN-4326-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-12698