UBUNTU-CVE-2018-12934

Details

remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.

Affected Packages

libiberty

Ubuntu 16.04 LTS

Fixed in:

20160215-1ubuntu0.3

binutils

Ubuntu 18.04 LTS

Fixed in:

2.30-21ubuntu1~18.04.3

libiberty

Ubuntu 18.04 LTS

Fixed in:

20170913-1ubuntu0.1

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm1

References

REPORT

https://ubuntu.com/security/CVE-2018-12934

ADVISORY

https://ubuntu.com/security/notices/USN-4326-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-12934