CVE-2018-20712

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31.1

Description The issue is related to a heap-based buffer over-read in the d expression 1 function in cp-demangle.c in GNU libiberty, as distributed in GNU Binutils. This can be exploited by a remote attacker using a crafted input, potentially causing segmentation faults and leading to a denial-of-service (DoS).

Recommendations For GNU Binutils version 2.31.1, consider disabling the d expression 1 function in cp-demangle.c as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.