Summary: | sys-devel/gcc-? via libiberty : binutils denial of service (excessive memory allocation and application crash) via a crafted file (CVE-2017-13716) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | D'juan McDonald (domhnall) <flopwiki> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | normal | CC: | toolchain |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://sourceware.org/bugzilla/show_bug.cgi?id=22009 | ||
Whiteboard: | A3 [noglsa cve] | ||
Package list: | Runtime testing required: | --- |
Description
D'juan McDonald (domhnall)
2017-08-29 00:46:58 UTC
2.29 only just got keyworded, so let's give it some waiting time. From upstream: This is a bug in the C++ demangler, which is part of the libiberty sources. These sources are managed by the GCC project, so please could you refile this bug report with the GCC bugzilla system ? Thanks. This should be ready to close. Please confirm. ok to close @security: please close Long obsolete. |