UBUNTU-CVE-2018-9138

Details

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.29 and 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_nested_args, demangle_args, do_arg, and do_type.

Affected Packages

libiberty

Ubuntu 16.04 LTS

Fixed in:

20160215-1ubuntu0.3

binutils

Ubuntu 18.04 LTS

Fixed in:

2.30-21ubuntu1~18.04.3

libiberty

Ubuntu 18.04 LTS

Fixed in:

20170913-1ubuntu0.1

binutils

Ubuntu Pro 14.04 LTS

Affected versions:

2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu12.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu1+15 more

binutils

Ubuntu Pro 16.04 LTS

Fixed in:

2.26.1-1ubuntu1~16.04.8+esm1

References

REPORT

https://ubuntu.com/security/CVE-2018-9138

ADVISORY

https://ubuntu.com/security/notices/USN-4326-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-1

ADVISORY

https://ubuntu.com/security/notices/USN-4336-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-9138