libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by     nm-new. (CVE-2022-27943)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. (CVE-2021-46174)

  - libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by     nm-new. (CVE-2022-27943)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in     file readelf.c. (CVE-2022-44840)

  - An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows     attackers to cause a denial of service due to memory leaks. (CVE-2022-47007)

  - An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38,     allows attackers to cause a denial of service due to memory leaks. (CVE-2022-47008)

  - An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers     to cause a denial of service due to memory leaks. (CVE-2022-47010)

  - An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows     attackers to cause a denial of service due to memory leaks. (CVE-2022-47011)

  - An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out     of bound reads which may cause a denial of service or other unspecified impacts. (CVE-2022-47673)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. (CVE-2022-47695)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function compare_symbols. (CVE-2022-47696)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a     DNS attack. (CVE-2022-48063)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file     and cause a DNS attack. (CVE-2022-48064)

  - GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function     find_abstract_instance in dwarf2.c. (CVE-2022-48065)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the binutils package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow     issue in demangle_type in rust-demangle.c. (CVE-2021-32256)

  - Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37. (CVE-2021-46174)

  - libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by     nm-new. (CVE-2022-27943)

  - Heap buffer overflow vulnerability in binutils readelf before 2.40 via function find_section_in_set in     file readelf.c. (CVE-2022-44840)

  - An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows     attackers to cause a denial of service due to memory leaks. (CVE-2022-47007)

  - An issue was discovered function make_tempdir, and make_tempname in bucomm.c in Binutils 2.34 thru 2.38,     allows attackers to cause a denial of service due to memory leaks. (CVE-2022-47008)

  - An issue was discovered function pr_function_type in prdbg.c in Binutils 2.34 thru 2.38, allows attackers     to cause a denial of service due to memory leaks. (CVE-2022-47010)

  - An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows     attackers to cause a denial of service due to memory leaks. (CVE-2022-47011)

  - An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out     of bound reads which may cause a denial of service or other unspecified impacts. (CVE-2022-47673)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c. (CVE-2022-47695)

  - An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or     other unspecified impacts via function compare_symbols. (CVE-2022-47696)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a     DNS attack. (CVE-2022-48063)

  - GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the     function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file     and cause a DNS attack. (CVE-2022-48064)

  - GNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function     find_abstract_instance in dwarf2.c. (CVE-2022-48065)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-145 advisory.

    libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by     nm-new. (CVE-2022-27943)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-c9a1fd5370 advisory.

    Backport fixes for CVE-2021-3826 and CVE-2022-27943.

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4277-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4146-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
504018	Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2022-27943)	Tenable OT Security	Tenable.ot	medium
258505	Linux Distros Unpatched Vulnerability : CVE-2022-27943	Nessus	Misc.	medium
188965	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3024)	Nessus	Huawei Local Security Checks	high
188899	EulerOS Virtualization 2.11.0 : binutils (EulerOS-SA-2023-3373)	Nessus	Huawei Local Security Checks	high
188886	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-3001)	Nessus	Huawei Local Security Checks	high
188724	EulerOS Virtualization 2.11.1 : binutils (EulerOS-SA-2023-3354)	Nessus	Huawei Local Security Checks	high
173347	Amazon Linux 2023 : cpp, gcc, gcc-c++ (ALAS2023-2023-145)	Nessus	Amazon Linux Local Security Checks	medium
169090	Fedora 36 : mingw-gcc (2022-c9a1fd5370)	Nessus	Fedora Local Security Checks	medium
168296	SUSE SLES12: binutils / binutils-devel / binutils-gold / cross-ppc-binutils / etc (SUSE-SU-2022:4277-1)	Nessus	SuSE Local Security Checks	high
168123	SUSE SLED15: binutils / binutils-devel / binutils-devel-32bit / binutils-gold / etc (SUSE-SU-2022:4146-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2022-27943

medium

Tenable Plugins

medium

medium

high

high

high

high

medium

medium

high

high