SB2018070610 - Denial of service in GNU Binutils
Published: July 6, 2018 Updated: August 1, 2019
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Resource exhaustion (CVE-ID: CVE-2018-12934)
The vulnerability allows a remote attacker to cause DoS condition on the target system.
The vulnerability exists in the remember_Ktype function defined in the cplus-dem.c source code file, distributed as a component of binutils due to boundary error when executing cxxfiltto perform C++ symbol demangling operations. A remote attacker can trick the victim into accessing a file that submits malicious input, cause the system to consume excessive memory resources, resulting in an out-of-memory error and leading to a DoS condition.
Remediation
Install update from vendor's website.