A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU
    Binutils through 2.31. There is a heap-based buffer overflow in bfd_elf32_swap_phdr_in in elfcode.h
    because the number of program headers is not restricted. (CVE-2018-19931)

  - An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU
    Binutils through 2.31. There is an integer overflow and infinite loop caused by the IS_CONTAINED_BY_LMA
    macro in elf.c. (CVE-2018-19932)

  - The _bfd_generic_read_minisymbols function in syms.c in the Binary File Descriptor (BFD) library (aka
    libbfd), as distributed in GNU Binutils 2.31, has a memory leak via a crafted ELF file, leading to a
    denial of service (memory consumption), as demonstrated by nm. (CVE-2018-20002)

  - A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as
    distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-
    service, as demonstrated by c++filt. (CVE-2018-20712)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as     distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-     service, as demonstrated by c++filt. (CVE-2018-20712)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
423733	Alpine: multiple binutils packages: security update to 2.32-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
423733	Alpine: multiple binutils packages: security update to 2.32-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
232137	Linux Distros Unpatched Vulnerability : CVE-2018-20712	Nessus	Misc.	medium
403689	Alpine: binutils-avr: security update to 2.32-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403689	Alpine: binutils-avr: security update to 2.32-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high

Detections

Analytics

CVE-2018-20712

medium

Tenable Plugins

high

high

medium

high

high