GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779218750 advisory.

  - Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to     potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
    (CVE-2021-3826)

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779218750 advisory.

  - Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to     potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
    (CVE-2021-3826)

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1780063601 advisory.

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5005:01 advisory.

    * gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus relies on the presence of the package as reported by the vendor.

An update of the gdb package has been released.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4277-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4146-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8415 advisory.

    [12.0.1-11.2]
    - Bump release and rebuild       resolves: rhbz#2096010

    [12.0.1-11.1]
    - Rebase to Fedora Rawhide       resolves: rhbz#2080170

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8415 advisory.

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8415 advisory.

    The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as     related support libraries.

    Security Fix(es):

    * gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
362138	AlmaLinux 9.6 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779218750)	Nessus	Alma Linux Local Security Checks	Local	medium
361836	Rocky Linux 9.6 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779218750)	Nessus	Rocky Linux Local Security Checks	Local	medium
360598	AlmaLinux 9.2 [TuxCare] Security Update: cpp / cross-gcc-aarch64 / cross-gcc-c++-aarch64 / gcc / gcc-c++ / etc (ALMALINUX9.2:CLSA-2026:1780063601)	Nessus	Alma Linux Local Security Checks	Local	medium
292284	MiracleLinux 9 : mingw-gcc-12.0.1-11.2.el9 (AXSA:2023-5005:01)	Nessus	Miracle Linux Local Security Checks	Local	medium
504073	Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2021-46195)	Tenable OT Security	Tenable.ot	Remote	medium
229779	Linux Distros Unpatched Vulnerability : CVE-2021-46195	Nessus	Misc.	Local	medium
204288	Photon OS 4.0: Gdb PHSA-2023-4.0-0440	Nessus	PhotonOS Local Security Checks	Local	high
168296	SUSE SLES12: binutils / binutils-devel / binutils-gold / cross-ppc-binutils / etc (SUSE-SU-2022:4277-1)	Nessus	SuSE Local Security Checks	Local	high
168123	SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2022:4146-1)	Nessus	SuSE Local Security Checks	Local	high
168117	Oracle Linux 9 : mingw-gcc (ELSA-2022-8415)	Nessus	Oracle Linux Local Security Checks	Local	medium
167846	AlmaLinux 9 : mingw-gcc (ALSA-2022:8415)	Nessus	Alma Linux Local Security Checks	Local	medium
167583	RHEL 9 : mingw-gcc (RHSA-2022:8415)	Nessus	Red Hat Local Security Checks	Local	medium

Detections

Analytics

CVE-2021-46195

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

high

high

high

medium

medium

medium