CVE-2019-9071

An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a stack consumption issue in d_count_templates_scopes in cp-demangle.c after many recursive calls.
References
Link Resource
http://www.securityfocus.com/bid/107147 Third Party Advisory VDB Entry
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=89394 Exploit Issue Tracking Third Party Advisory
https://security.gentoo.org/glsa/202107-24 Third Party Advisory
https://security.netapp.com/advisory/ntap-20190314-0003/ Patch Third Party Advisory
https://sourceware.org/bugzilla/show_bug.cgi?id=24227 Issue Tracking Exploit Third Party Advisory
https://support.f5.com/csp/article/K02884135 Third Party Advisory
https://usn.ubuntu.com/4326-1/ Third Party Advisory
https://usn.ubuntu.com/4336-1/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:2.32:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

History

10 Dec 2021, 19:32

Type Values Removed Values Added
CPE cpe:2.3:a:netapp:element_software_management:*:*:*:*:*:*:*:* cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:esm:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:*:*:*:*
cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*
References
  • (GENTOO) https://security.gentoo.org/glsa/202107-24 - Third Party Advisory
References (CONFIRM) https://support.f5.com/csp/article/K02884135 - (CONFIRM) https://support.f5.com/csp/article/K02884135 - Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4336-1/ - (UBUNTU) https://usn.ubuntu.com/4336-1/ - Third Party Advisory
References (UBUNTU) https://usn.ubuntu.com/4326-1/ - (UBUNTU) https://usn.ubuntu.com/4326-1/ - Third Party Advisory

10 Jul 2021, 05:15

Type Values Removed Values Added
References (MISC) https://sourceware.org/bugzilla/show_bug.cgi?id=24227 - Exploit, Issue Tracking, Third Party Advisory (MISC) https://sourceware.org/bugzilla/show_bug.cgi?id=24227 - Issue Tracking, Exploit, Third Party Advisory

Information

Published : 2019-02-24 00:29

Updated : 2023-12-10 12:44


NVD link : CVE-2019-9071

Mitre link : CVE-2019-9071

CVE.ORG link : CVE-2019-9071


JSON object : View

Products Affected

gnu

  • binutils

netapp

  • hci_management_node
  • solidfire

canonical

  • ubuntu_linux
CWE
CWE-674

Uncontrolled Recursion