cve/2018/CVE-2018-20712.md

CVE-2018-20712

Description

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

POC

Reference

• https://gcc.gnu.org/bugzilla/show_bug.cgi?id=88629
• https://sourceware.org/bugzilla/show_bug.cgi?id=24043

Github

• https://github.com/phonito/phonito-vulnerable-container
• https://github.com/testing-felickz/docker-scout-demo