GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and memory resources.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-8415 advisory.

    [12.0.1-11.2]
    - Bump release and rebuild       resolves: rhbz#2096010

    [12.0.1-11.1]
    - Rebase to Fedora Rawhide       resolves: rhbz#2080170

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4277-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:8415 advisory.

    The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as     related support libraries.

    Security Fix(es):

    * gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

    Additional Changes:

    For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.1 Release Notes     linked from the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5005:01 advisory.

    * gcc: uncontrolled recursion in libiberty/rust-demangle.c (CVE-2021-46195)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:8415 advisory.

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c.
    This vulnerability allows attackers to cause a Denial of Service (DoS) by consuming excessive CPU and     memory resources. (CVE-2021-46195)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4146-1 advisory.

    The following security bugs were fixed:

    - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579).
    - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597).
    - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374).
    - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c     (bsc#1202969).
    - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929).
    - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783).
    - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592).
    - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c     (bsc#1202966).
    - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in     binutils/dwarf.c (bsc#1202967).
    - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816).



Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update of the gdb package has been released.

ID	Name	Product	Family	Published	Updated	Severity
504073	Siemens SIMATIC S7-1500 Uncontrolled Recursion (CVE-2021-46195)	Tenable OT Security	Tenable.ot	11/13/2025	3/5/2026	medium
168117	Oracle Linux 9 : mingw-gcc (ELSA-2022-8415)	Nessus	Oracle Linux Local Security Checks	11/22/2022	10/22/2024	medium
168296	SUSE SLES12 Security Update : binutils (SUSE-SU-2022:4277-1)	Nessus	SuSE Local Security Checks	11/30/2022	9/24/2025	high
167583	RHEL 9 : mingw-gcc (RHSA-2022:8415)	Nessus	Red Hat Local Security Checks	11/16/2022	3/15/2025	medium
292284	MiracleLinux 9 : mingw-gcc-12.0.1-11.2.el9 (AXSA:2023-5005:01)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/20/2026	medium
167846	AlmaLinux 9 : mingw-gcc (ALSA-2022:8415)	Nessus	Alma Linux Local Security Checks	11/18/2022	10/3/2023	medium
229779	Linux Distros Unpatched Vulnerability : CVE-2021-46195	Nessus	Misc.	3/5/2025	4/28/2026	medium
168123	SUSE SLED15 / SLES15 Security Update : binutils (SUSE-SU-2022:4146-1)	Nessus	SuSE Local Security Checks	11/23/2022	9/24/2025	high
204288	Photon OS 4.0: Gdb PHSA-2023-4.0-0440	Nessus	PhotonOS Local Security Checks	7/24/2024	7/24/2024	high

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

medium

medium

high

high