CVE-2018-17985

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.31

Description The issue is related to a stack consumption problem in the cp-demangle.c component of GNU libiberty, distributed in GNU Binutils. This problem is caused by the cplus demangle type function making recursive calls to itself in certain scenarios involving many 'P' characters. The vulnerability allows a remote attacker to cause a denial of service due to uncontrolled resource consumption.

Recommendations For GNU Binutils version 2.31, consider applying a patch or fix that addresses the recursive call issue in the cplus demangle type function to prevent stack consumption problems. As a temporary workaround, restrict the input to prevent scenarios involving many 'P' characters that could trigger the recursive calls.