Описание
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
A use-after-free flaw was found in binutils’ cxxfilt functionality. The attack needs to be initiated locally where an attacker could convince a victim to read a specially crafted file which is processed by cxxfilt, leading to disclosure of memory and possibly leading to the execution of arbitrary code or causing the utility to crash.
Отчет
Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/. Red Hat Enterprise Linux 8 and above are shipped with binutils v2.30 and upper versions which are not affected by this vulnerability.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 6 | binutils | Out of support scope | ||
| Red Hat Enterprise Linux 7 | binutils | Out of support scope | ||
| Red Hat Enterprise Linux 8 | binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-10-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-11-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | gcc-toolset-9-binutils | Not affected | ||
| Red Hat Enterprise Linux 8 | mingw-binutils | Not affected | ||
| Red Hat Enterprise Linux 9 | binutils | Not affected | ||
| Red Hat Enterprise Linux 9 | mingw-binutils | Not affected |
Показывать по
Дополнительная информация
Статус:
EPSS
7.8 High
CVSS3
Связанные уязвимости
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerabi ...
GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
EPSS
7.8 High
CVSS3