Every CVE Search/ Get API key

CVE-2018-20673

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2...

5.5 MediumFix available

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.64%Up 1.0 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 5.5

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
CVE-2018-20673
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-190, CWE-787
Updated
2026-11-02
CVE List No score

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
CVE-2018-20673
Updated
2026-11-02
EUVDEUVD-2018-13224 No score

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
EUVD-2018-13224
Updated
2026-11-03
GitHub AdvisoriesGHSA-jx5v-cp2v-88f2 5.5

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2...

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
GHSA-jx5v-cp2v-88f2
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVAZL-41601 5.5

CVE-2018-20673 affecting package crash for versions less than 9.0.0-1

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
AZL-41601
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 5.5

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
CVE-2018-20673
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2018-20673 5.5

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
DEBIAN-CVE-2018-20673
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2021:4386 5.3

Red Hat Security Advisory: gcc security and bug fix update

Record
RHSA-2021:4386
CVSS 3.0
5.3 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2021:4386 5.3

Low: gcc security and bug fix update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

  • libiberty: Integer overflow in demangle_template() function (CVE-2018-20673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.

Record
RLSA-2021:4386
CVSS 3.0
5.3 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2018-20673 5.5

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

Record
UBUNTU-CVE-2018-20673
CVSS 3.0
5.5 MediumCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2021:4386 No score

Low: gcc security and bug fix update

The gcc packages provide compilers for C, C++, Java, Fortran, Objective C, and Ada 95 GNU, as well as related support libraries.

Security Fix(es):

  • libiberty: Integer overflow in demangle_template() function (CVE-2018-20673)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:4386
Updated
2026-11-02
OSVCLSA-2022-1646060667 No score

Fix of CVE: CVE-2021-42574, CVE-2018-20673

  • CVE-2021-42574: Developer environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks (#2008391)
  • CVE-2018-20673: libiberty: Integer overflow in demangle_template() function (#1668394)
Record
CLSA-2022-1646060667
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2018-20673 No score

CVE-2018-20673 in binutils - Patched by Root

Root has patched CVE-2018-20673 in the binutils package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2018-20673
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cpp
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc-c++
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc-gdb-plugin
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc-gfortran
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc-offload-nvptx
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
gcc-plugin-devel
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
libitm-devel
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
libquadmath-devel
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
libstdc++-devel
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
Show 130 moreShow less
Affected packages
PackageAffectedFixed
libstdc++-docs
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
libstdc++-static
AlmaLinux:8
 before 8.5.0-3.el8.alma
8.5.0-3.el8.alma
crash
Azure Linux:3
 before 9.0.0-1
9.0.0-1
cpp
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc-c++
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc-gdb-plugin
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc-gfortran
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc-offload-nvptx
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
gcc-plugin-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libasan
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libasan-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libatomic
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libatomic-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libgcc
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libgfortran
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libgfortran-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libgomp
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libgomp-offload-nvptx
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libitm
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libitm-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libitm-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
liblsan
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
liblsan-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libquadmath
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libquadmath-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libquadmath-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libstdc++
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libstdc++-devel
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libstdc++-docs
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libstdc++-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libtsan
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libtsan-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libubsan
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
libubsan-static
TuxCare:CentOS:8.4
From an advisory covering 2 CVEs
 before 8.4.1-1.el8.4.tuxcare.els1
8.4.1-1.el8.4.tuxcare.els1
binutils
Debian:12
 All versions, plus listed versions
2.40-22.40.50.20230111-12.40.50.20230215-12.40.50.20230501-12.40.50.20230510-1
Show 45 moreShow less
2.40.50.20230602-12.40.50.20230611-12.40.50.20230611-22.40.50.20230622-12.40.50.20230625-12.40.50.20230630-12.40.90.20230705-12.40.90.20230714-12.40.90.20230714-22.40.90.20230720-12.40.90.20230729-12.40.90.20230729-22.41-12.41-22.41-32.41-42.41-52.41-62.41-72.41.50.20230731-12.41.50.20230803-12.41.50.20230905-12.41.50.20231010-12.41.50.20231101-12.41.50.20231125-12.41.50.20231202-12.41.50.20231206-12.41.50.20231214-12.41.50.20231227-12.41.90.20240115-12.41.90.20240122-12.42-12.42-22.42-2+hurd.12.42-32.42-42.42.50.20240614-12.42.50.20240618-12.42.50.20240625-12.42.50.20240710-12.42.90.20240720-12.42.90.20240720-22.43-12.43-22.43.1-1
 None known
binutils
Debian:13
 All versions, plus listed versions
2.44-32.44.50.20250201-12.44.50.20250207-12.44.50.20250218-12.44.50.20250218-2
Show 45 moreShow less
2.44.50.20250309-12.44.50.20250405-12.44.50.20250502-12.44.50.20250520-12.44.50.20250528-12.44.50.20250707-12.44.90.20250719-12.45-12.45-22.45-32.45-42.45-52.45-62.45-72.45-82.45.50.20250813-12.45.50.20250903-12.45.50.20251005-12.45.50.20251023-12.45.50.20251023-22.45.50.20251122-12.45.50.20251125-12.45.50.20251201-12.45.50.20251209-12.45.50.20260116-12.45.50.20260119-12.45.90.20260125-12.45.90.20260201-12.46-12.46-22.46-32.46.50.20260216-12.46.50.20260509-12.46.50.20260519-12.46.50.20260608-12.46.50.20260617-12.46.90.20260712-12.47-12.47-22.47-32.47-42.47-52.47-62.47.50.20260813-12.47.50.20260813-2
 None known
binutils
Debian:14
 All versions, plus listed versions
2.44-32.44.50.20250201-12.44.50.20250207-12.44.50.20250218-12.44.50.20250218-2
Show 45 moreShow less
2.44.50.20250309-12.44.50.20250405-12.44.50.20250502-12.44.50.20250520-12.44.50.20250528-12.44.50.20250707-12.44.90.20250719-12.45-12.45-22.45-32.45-42.45-52.45-62.45-72.45-82.45.50.20250813-12.45.50.20250903-12.45.50.20251005-12.45.50.20251023-12.45.50.20251023-22.45.50.20251122-12.45.50.20251125-12.45.50.20251201-12.45.50.20251209-12.45.50.20260116-12.45.50.20260119-12.45.90.20260125-12.45.90.20260201-12.46-12.46-22.46-32.46.50.20260216-12.46.50.20260509-12.46.50.20260519-12.46.50.20260608-12.46.50.20260617-12.46.90.20260712-12.47-12.47-22.47-32.47-42.47-52.47-62.47.50.20260813-12.47.50.20260813-2
 None known
cpp
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
cpp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-c++
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-c++-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debugsource
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gdb-plugin
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gdb-plugin-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gfortran
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gfortran-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-offload-nvptx
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-plugin-devel-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libasan-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libatomic-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgcc-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgfortran-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libitm-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libitm-devel
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
liblsan-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libquadmath-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libquadmath-devel
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-devel
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-docs
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libtsan-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libubsan-debuginfo
Red Hat:enterprise_linux:8::appstream
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
cpp-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-c++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gdb-plugin-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gfortran-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-plugin-devel-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libasan
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libasan-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libatomic
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libatomic-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libatomic-static
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgcc
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgcc-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgfortran
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgfortran-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-offload-nvptx
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libitm
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libitm-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
liblsan
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
liblsan-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libquadmath
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libquadmath-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libtsan
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libtsan-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libubsan
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libubsan-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
cpp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-c++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-debugsource
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gdb-plugin-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-gfortran-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-plugin-devel
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc-plugin-devel-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libasan-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libatomic-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgcc-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgfortran-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libgomp-offload-nvptx-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libitm-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
liblsan-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libquadmath-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libstdc++-static
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libtsan-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
libubsan-debuginfo
Red Hat:enterprise_linux:8::crb
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
gcc
Rocky Linux:8
 before 0:8.5.0-3.el8
0:8.5.0-3.el8
binutils
Root:Debian:12
 before 2.40-2.root.io.17
2.40-2.root.io.172.40-2.root.io.182.40-2.root.io.192.40-2.root.io.202.40-2.root.io.212.40-2.root.io.222.40-2.root.io.232.40-2.root.io.242.40-2.aikido.25
rootio-binutils
Root:Debian:12
 before 2.40-2.root.io.17
2.40-2.root.io.172.40-2.root.io.182.40-2.root.io.192.40-2.root.io.202.40-2.root.io.212.40-2.root.io.222.40-2.root.io.232.40-2.root.io.242.40-2.aikido.25
binutils
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1
Show 20 moreShow less
2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8
 None known
binutils
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 37 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.82.26.1-1ubuntu1~16.04.8+esm12.26.1-1ubuntu1~16.04.8+esm32.26.1-1ubuntu1~16.04.8+esm42.26.1-1ubuntu1~16.04.8+esm52.26.1-1ubuntu1~16.04.8+esm62.26.1-1ubuntu1~16.04.8+esm72.26.1-1ubuntu1~16.04.8+esm92.26.1-1ubuntu1~16.04.8+esm112.26.1-1ubuntu1~16.04.8+esm122.26.1-1ubuntu1~16.04.8+esm132.26.1-1ubuntu1~16.04.8+esm14
 None known
binutils
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1
Show 25 moreShow less
2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.22.30-21ubuntu1~18.04.32.30-21ubuntu1~18.04.42.30-21ubuntu1~18.04.52.30-21ubuntu1~18.04.72.30-21ubuntu1~18.04.82.30-21ubuntu1~18.04.92.30-21ubuntu1~18.04.9+esm12.30-21ubuntu1~18.04.9+esm32.30-21ubuntu1~18.04.9+esm42.30-21ubuntu1~18.04.9+esm52.30-21ubuntu1~18.04.9+esm13
 None known

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-20673 is a medium vulnerability (CVSS 5.5) in Gnu Binutils, published January 4, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.64%, the 76th percentile. Fixed in cpp 8.5.0-3.el8.alma.

References

Show 15 moreShow less
This page doesn't list everything

Left out here: 89 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open