Infinite loop in Binutils - CVE-2018-18700
Published: October 29, 2018 / Updated: August 8, 2020
Vulnerability identifier: #VU36464
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2018-18700
CWE-ID: CWE-835
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to perform a denial of service (DoS) attack.
An issue was discovered in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31. There is a stack consumption vulnerability resulting from infinite recursion in the functions d_name(), d_encoding(), and d_local_name() in cp-demangle.c. Remote attackers could leverage this vulnerability to cause a denial-of-service via an ELF file, as demonstrated by nm.
Affected software
Binutils
IBM Cloud Pak for Security
IBM Sterling Order Management
IBM Cloud Pak for Security
IBM Sterling Order Management
How to mitigate CVE-2018-18700
Install update from vendor's website.
IBM Cloud Pak for Security - update to 1.11.2.0
IBM Sterling Order Management - update to 10.0.2403.1
IBM Sterling Order Management - update to 10.0.2403.1