Every CVE Search/ Get API key

CVE-2018-12698

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...

7.5 HighFix available

CVE-2018-12698 is a high vulnerability (CVSS 7.5) in Gnu Binutils, published June 23, 2018. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.20%, the 93rd percentile. Fixed in binutils 2.26.1-1ubuntu1~16.04.10.

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

6.20%Up 3.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
CVE-2018-12698
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
CVE-2018-12698
Updated
2026-11-02
EUVDEUVD-2018-4651 No score

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
EUVD-2018-4651
Updated
2026-11-03
GitHub AdvisoriesGHSA-3xpc-qj75-hw9m 7.5

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows...

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
GHSA-3xpc-qj75-hw9m
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
CVE-2018-12698
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2018-12698 7.5

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
DEBIAN-CVE-2018-12698
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVUBUNTU-CVE-2018-12698 7.5

demangle_template in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM) during the "Create an array for saving the template argument values" XNEWVEC call. This can occur during execution of objdump.

Record
UBUNTU-CVE-2018-12698
CVSS 3.0
7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVCLSA-2021-1635459139 No score

Fix CVE(s): CVE-2018-6323, CVE-2017-8421, CVE-2017-15024, CVE-2017-15025, CVE-2017-15022, CVE-2017-15020, CVE-2017-15021, CVE-2017-15225, CVE-2018-18483, CVE-2017-15996, CVE-2018-18484, CVE-2017-12799, CVE-2017-16831, CVE-2017-16832, CVE-2018-1000876, CVE-2018-7208, CVE-2019-14250, CVE-2017-12967, CVE-2019-9075, CVE-2017-17080, CVE-2019-9074, CVE-2018-17794, CVE-2017-17125, CVE-2017-17124, CVE-2017-17121, CVE-2017-6969, CVE-2017-17123, CVE-2018-17358, CVE-2017-6965, CVE-2017-6966, CVE-2018-12641, CVE-2018-8945, CVE-2017-7299, CVE-2018-12699, CVE-2018-10372, CVE-2018-10373, CVE-2019-17451, CVE-2019-17450, CVE-2018-18701, CVE-2018-18700, CVE-2017-7210, CVE-2018-20623, CVE-2017-15938, CVE-2017-15939, CVE-2017-9039, CVE-2017-9038, CVE-2017-14940, CVE-2018-17985, CVE-2018-12700, CVE-2017-9742, CVE-2017-9745, CVE-2017-9744, CVE-2017-9747, CVE-2017-7209, CVE-2017-9749, CVE-2017-9748, CVE-2018-9138, CVE-2017-16828, CVE-2017-16827, CVE-2017-16826, CVE-2017-7614, CVE-2018-6759, CVE-2016-4491, CVE-2017-9044, CVE-2017-9746, CVE-2017-9042, CVE-2017-9040, CVE-2017-9041, CVE-2017-9752, CVE-2017-9753, CVE-2017-9750, CVE-2017-9751, CVE-2017-9756, CVE-2016-4493, CVE-2017-9754, CVE-2017-9755, CVE-2016-4492, CVE-2018-19932, CVE-2017-12458, CVE-2017-12459, CVE-2018-18606, CVE-2018-18607, CVE-2018-18605, CVE-2017-12452, CVE-2017-12453, CVE-2017-12450, CVE-2017-12451, CVE-2017-12456, CVE-2016-4490, CVE-2017-12454, CVE-2017-12455, CVE-2019-14444, CVE-2016-2226, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2018-18309, CVE-2017-7223, CVE-2017-12449, CVE-2017-12448, CVE-2016-4488, CVE-2016-4489, CVE-2018-17359, CVE-2016-4487, CVE-2018-20671, CVE-2018-20002, CVE-2017-14128, CVE-2017-14129, CVE-2018-7568, CVE-2018-7569, CVE-2017-7302, CVE-2017-7301, CVE-2017-7300, CVE-2018-12934, CVE-2017-8394, CVE-2018-7643, CVE-2018-7642, CVE-2018-17360, CVE-2019-12972, CVE-2018-13033, CVE-2018-19931, CVE-2018-10534, CVE-2018-10535, CVE-2019-9077, CVE-2019-9071, CVE-2019-9070, CVE-2019-9073, CVE-2017-14333, CVE-2018-12698, CVE-2017-14130, CVE-2018-12697, CVE-2018-6543, CVE-2017-9954, CVE-2017-12457, CVE-2017-14939, CVE-2017-14938, CVE-2017-14932, CVE-2017-14930, CVE-2017-8398, CVE-2017-8393, CVE-2017-8395, CVE-2017-14529, CVE-2017-8397, CVE-2017-8396, CVE-2017-13710, CVE-2016-6131

  • SECURITY UPDATE:
    • CVE-*.patch: backported many upstream patches to fix security issues.
    • CVE-2016-2226, CVE-2016-4487, CVE-2016-4488, CVE-2016-4489, CVE-2016-4490, CVE-2016-4492, CVE-2016-4493, CVE-2016-6131, CVE-2016-4491, CVE-2017-6965, CVE-2017-6966, CVE-2017-6969, CVE-2017-7209, CVE-2017-7210, CVE-2017-7223, CVE-2017-7224, CVE-2017-7225, CVE-2017-7226, CVE-2017-7227, CVE-2017-7299, CVE-2017-7300, CVE-2017-7301, CVE-2017-7302, CVE-2017-7614, CVE-2017-8393, CVE-2017-8394, CVE-2017-8395, CVE-2017-8397, CVE-2017-8396, CVE-2017-8398, CVE-2017-8421, CVE-2017-9038, CVE-2017-9039, CVE-2017-9040, CVE-2017-9042, CVE-2017-9041, CVE-2017-9044, CVE-2017-9742, CVE-2017-9744, CVE-2017-9752, CVE-2017-9745, CVE-2017-9746, CVE-2017-9747, CVE-2017-9748, CVE-2017-9749, CVE-2017-9750, CVE-2017-9751, CVE-2017-9753, CVE-2017-9754, CVE-2017-9755, CVE-2017-9756, CVE-2017-9954, CVE-2017-12448, CVE-2017-12449, CVE-2017-12455, CVE-2017-12457, CVE-2017-12458, CVE-2017-12459, CVE-2017-12450, CVE-2017-12452, CVE-2017-12453, CVE-2017-12454, CVE-2017-12456, CVE-2017-14333, CVE-2017-12451, CVE-2017-12799, CVE-2017-12967, CVE-2017-13710, CVE-2017-14128, CVE-2017-14129, CVE-2017-14130, CVE-2017-14529, CVE-2017-14930, CVE-2017-14932, CVE-2017-14938, CVE-2017-14939, CVE-2017-14940, CVE-2017-15020, CVE-2017-15021, CVE-2017-15022, CVE-2017-15024, CVE-2017-15025, CVE-2017-15225, CVE-2017-15938, CVE-2017-15939, CVE-2017-15996, CVE-2017-16826, CVE-2017-16827, CVE-2017-16828, CVE-2017-16831, CVE-2017-16832, CVE-2017-17080, CVE-2017-17121, CVE-2017-17123, CVE-2017-17124, CVE-2018-6323, CVE-2018-6543, CVE-2018-6759, CVE-2018-7208, CVE-2018-7568, CVE-2018-7569, CVE-2018-7642, CVE-2018-7643, CVE-2018-8945, CVE-2018-13033, CVE-2018-9138, CVE-2018-12641, CVE-2018-12697, CVE-2018-12698, CVE-2018-12699, CVE-2018-12700, CVE-2018-17794, CVE-2018-17985, CVE-2018-18484, CVE-2018-18700, CVE-2018-18701, CVE-2018-10372, CVE-2018-10373, CVE-2018-10534, CVE-2018-10535, CVE-2018-12934, CVE-2018-18483, CVE-2018-17358, CVE-2018-17359, CVE-2018-17360, CVE-2018-18309, CVE-2018-18605, CVE-2018-18606, CVE-2018-18607, CVE-2018-19931, CVE-2018-19932, CVE-2018-20002, CVE-2018-20623, CVE-2018-20671, CVE-2018-1000876, CVE-2017-17125, CVE-2019-9073, CVE-2019-9074, CVE-2019-9075, CVE-2019-9077, CVE-2019-9070, CVE-2019-9071, CVE-2019-12972, CVE-2019-14250, CVE-2019-14444, CVE-2019-17450, CVE-2019-17451
Record
CLSA-2021-1635459139
Updated
2026-11-02
OSVCLSA-2021-1640790635 No score

Fixed 14 CVEs in binutils

  • CVE-2018-9138: Fix stack exhaustion
  • CVE-2018-12641: Fix stack exhaustion
  • CVE-2018-12697: Fix NULL pointer dereference
  • CVE-2018-12698: Fix memory consumption
  • CVE-2018-12699: Fix heap-based buffer overflow
  • CVE-2018-12700: Fix infinite recursion
  • CVE-2018-17794: Fix NULL pointer dereference
  • CVE-2018-17985: Fix recursive calls
  • CVE-2018-18484: Fix stack exhaustion
  • CVE-2018-18700: Fix stack consumption vulnerability
  • CVE-2018-18701: Fix infinite recursion
  • CVE-2018-18483: Fix malloc call with the result of an integer-overflowing calculation
  • CVE-2018-12934: Fix excessive memory consumption
  • CVE-2021-45078: Fix heap-based buffer overflow
Record
CLSA-2021-1640790635
Updated
2026-11-02
OSVCLSA-2022-1641904053 No score

Fix of 14 CVEs

  • CVE-2018-9138: Fix stack exhaustion
  • CVE-2018-12641: Fix stack exhaustion
  • CVE-2018-12697: Fix NULL pointer dereference
  • CVE-2018-12698: Fix memory consumption
  • CVE-2018-12699: Fix heap-based buffer overflow
  • CVE-2018-12700: Fix infinite recursion
  • CVE-2018-17794: Fix NULL pointer dereference
  • CVE-2018-17985: Fix recursive calls
  • CVE-2018-18484: Fix stack exhaustion
  • CVE-2018-18700: Fix stack consumption vulnerability
  • CVE-2018-18701: Fix infinite recursion
  • CVE-2018-18483: Fix malloc call with the result of an integer-overflowing
  • CVE-2018-12934: Fix excessive memory consumption
  • CVE-2021-45078: Fix heap-based buffer overflow
Record
CLSA-2022-1641904053
Updated
2026-11-02
OSVUSN-4326-1 No score

libiberty vulnerabilities

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary code

Record
USN-4326-1
Updated
2026-11-02
OSVUSN-4336-1 No score

binutils vulnerabilities

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4336-1
Updated
2026-11-02
OSVUSN-4336-2 No score

binutils vulnerabilities

USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

It was discovered that GNU binutils contained a large number of security issues. If a user or automated system were tricked into processing a specially-crafted file, a remote attacker could cause GNU binutils to crash, resulting in a denial of service, or possibly execute arbitrary code.

Record
USN-4336-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
binutils
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-aarch64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-alpha-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabi
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-arm-linux-gnueabihf
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-dev
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-doc
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-hppa64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-m68k-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
Show 26 moreShow less
Affected packages
PackageAffectedFixed
binutils-mips-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64-linux-gnuabi64
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mips64el-linux-gnuabi64
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-mipsel-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-multiarch-dev
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc-linux-gnuspe
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-powerpc64le-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-s390x-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sh4-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-source
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils-sparc64-linux-gnu
TuxCare:Ubuntu:16.04
 before 2.26.1-1ubuntu1~16.04.10
2.26.1-1ubuntu1~16.04.10
binutils
TuxCare:OracleLinux:6
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els4
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els4
binutils-devel
TuxCare:OracleLinux:6
 before 1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els4
1:2.20.51.0.2-5.48.0.3.el6.tuxcare.ol.els4
binutils
TuxCare:CentOS:6
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
binutils-devel
TuxCare:CentOS:6
 before 1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
1:2.20.51.0.2-5.48.1.el6.tuxcare.els4
binutils
Debian:12
 before 2.32.51.20190707-1
2.32.51.20190707-1
binutils
Debian:13
 before 2.32.51.20190707-1
2.32.51.20190707-1
binutils
Debian:14
 before 2.32.51.20190707-1
2.32.51.20190707-1
binutils
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
2.23.52.20130913-0ubuntu12.23.90.20131017-1ubuntu12.23.90.20131116-1ubuntu12.23.91.20131123-1ubuntu12.24-1ubuntu1
Show 20 moreShow less
2.24-1ubuntu22.24-2ubuntu12.24-2ubuntu22.24-2ubuntu32.24-4ubuntu12.24-5ubuntu12.24-5ubuntu22.24-5ubuntu32.24-5ubuntu3.12.24-5ubuntu132.24-5ubuntu142.24-5ubuntu14.12.24-5ubuntu14.22.24-5ubuntu14.2+esm12.24-5ubuntu14.2+esm22.24-5ubuntu14.2+esm32.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm72.24-5ubuntu14.2+esm8
 None known
libiberty
Ubuntu:16.04:LTS
 before 20160215-1ubuntu0.3, plus listed versions
20141014-120160215-120160215-1ubuntu0.2
20160215-1ubuntu0.3
binutils
Ubuntu:Pro:16.04:LTS
 before 2.26.1-1ubuntu1~16.04.8+esm1, plus listed versions
2.25.1-6ubuntu12.25.51.20151022-0ubuntu22.25.51.20151022-0ubuntu32.25.51.20151027-0ubuntu12.25.51.20151028-0ubuntu1
Show 26 moreShow less
2.25.51.20151106-0ubuntu12.25.51.20151113-1ubuntu12.25.51.20151113-2ubuntu12.25.90.20151125-1ubuntu12.25.90.20151125-2ubuntu12.25.90.20151211-0ubuntu12.25.90.20151211-0ubuntu22.25.90.20160101-1ubuntu12.25.90.20160101-1ubuntu22.26-2ubuntu12.26-3ubuntu12.26-4ubuntu12.26-5ubuntu12.26-6ubuntu12.26-7ubuntu22.26-8ubuntu12.26-8ubuntu22.26-8ubuntu2.12.26.1-1ubuntu1~16.042.26.1-1ubuntu1~16.04.12.26.1-1ubuntu1~16.04.32.26.1-1ubuntu1~16.04.42.26.1-1ubuntu1~16.04.52.26.1-1ubuntu1~16.04.62.26.1-1ubuntu1~16.04.72.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm1
binutils
Ubuntu:18.04:LTS
 before 2.30-21ubuntu1~18.04.3, plus listed versions
2.29.1-4ubuntu12.29.1-6ubuntu12.29.1-7ubuntu12.29.1-8ubuntu12.29.1-10ubuntu1
Show 14 moreShow less
2.29.1-12ubuntu12.30-4ubuntu12.30-5ubuntu12.30-7ubuntu12.30-8ubuntu12.30-9ubuntu12.30-10ubuntu12.30-11ubuntu12.30-14ubuntu22.30-15ubuntu12.30-20ubuntu2~18.042.30-21ubuntu1~18.042.30-21ubuntu1~18.04.12.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.3
libiberty
Ubuntu:18.04:LTS
 before 20170913-1ubuntu0.1, plus listed versions
20170913-1
20170913-1ubuntu0.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 159 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open