An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack
    Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack
    frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression. (CVE-2018-9996)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack     Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack     frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression. (CVE-2018-9996)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the gdb package has been released.

ID	Name	Product	Family	Type	Severity
460974	Echo: binutils: security update to 2.44binutils-gold: security update to 2.44-2+e1	Tenable Cloud Security	Echo Local Security Checks	Local	medium
460974	Echo: binutils: security update to 2.44binutils-gold: security update to 2.44-2+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	medium
232056	Linux Distros Unpatched Vulnerability : CVE-2018-9996	Nessus	Misc.	Local	medium
204288	Photon OS 4.0: Gdb PHSA-2023-4.0-0440	Nessus	PhotonOS Local Security Checks	Local	high

Detections

Analytics

CVE-2018-9996

medium

Tenable Plugins

medium

medium

medium

high