GNU libiberty CVE-2018-12938 Denial of Service Vulenerability

GNU libiberty is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to consume excess memory, resulting in denial-of-service conditions.

Information

Bugtraq ID: 104575
Class: Boundary Condition Error
CVE: CVE-2018-12938

Remote: Yes
Local: No
Published: Jun 27 2018 12:00AM
Updated: Jun 27 2018 12:00AM
Credit: Sergej Schumilo, Cornelius Aschermann, Ruhr-Universität Bochum
Vulnerable: GNU libiberty 0
GNU Binutils 2.30

Not Vulnerable:

Exploit

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

References:

• GCC Home Page (GNU)
  
• Bug 23059 - OOM-Bug in cxxfilt (binuitils-2.30-15ubuntu1) (sourceware.org)
  
• Bug 85453 - OOM-Bug in cxxfilt / C++ name demangler (binuitils-2.30-15ubuntu1) (GNU)
  
• OOM-Bug in cxxfilt (binuitils-2.30-15ubuntu1) (Launchpad)
  

Source: www.securityfocus.com