A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafte...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

A heap-based buffer over-read exists in the function d_expression_1 in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils 2.31.1. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by c++filt.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org