CVE catalog

CVE-2018-20657

UBUNTU-CVE-2018-20657

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Updated
Source
[NVD] · [CVE record]
EPSS
4.00% · Oct 25, 2026

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntubinutilspro2.23.52.20130913-0ubuntu1vulnerable
Ubuntubinutilspro2.23.90.20131017-1ubuntu1vulnerable
Ubuntubinutilspro2.23.90.20131116-1ubuntu1vulnerable
Ubuntubinutilspro2.23.91.20131123-1ubuntu1vulnerable
Ubuntubinutilspro2.24-1ubuntu1vulnerable
Ubuntubinutilspro2.24-1ubuntu2vulnerable
Ubuntubinutilspro2.24-2ubuntu1vulnerable
Ubuntubinutilspro2.24-2ubuntu2vulnerable
Ubuntubinutilspro2.24-2ubuntu3vulnerable
Ubuntubinutilspro2.24-4ubuntu1vulnerable
Ubuntubinutilspro2.24-5ubuntu1vulnerable
Ubuntubinutilspro2.24-5ubuntu2vulnerable
Ubuntubinutilspro2.24-5ubuntu3vulnerable
Ubuntubinutilspro2.24-5ubuntu3.1vulnerable
Ubuntubinutilspro2.24-5ubuntu13vulnerable
Ubuntubinutilspro2.24-5ubuntu14vulnerable
Ubuntubinutilspro2.24-5ubuntu14.1vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm1vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm2vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm3vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm5vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm6vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm7vulnerable
Ubuntubinutilspro2.24-5ubuntu14.2+esm8vulnerable
Ubuntubinutilspro2.25.1-6ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151022-0ubuntu2vulnerable
Ubuntubinutilspro2.25.51.20151022-0ubuntu3vulnerable
Ubuntubinutilspro2.25.51.20151027-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151028-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151106-0ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151113-1ubuntu1vulnerable
Ubuntubinutilspro2.25.51.20151113-2ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151125-1ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151125-2ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151211-0ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20151211-0ubuntu2vulnerable
Ubuntubinutilspro2.25.90.20160101-1ubuntu1vulnerable
Ubuntubinutilspro2.25.90.20160101-1ubuntu2vulnerable
Ubuntubinutilspro2.26-2ubuntu1vulnerable
Ubuntubinutilspro2.26-3ubuntu1vulnerable
Ubuntubinutilspro2.26-4ubuntu1vulnerable
Ubuntubinutilspro2.26-5ubuntu1vulnerable
Ubuntubinutilspro2.26-6ubuntu1vulnerable
Ubuntubinutilspro2.26-7ubuntu2vulnerable
Ubuntubinutilspro2.26-8ubuntu1vulnerable
Ubuntubinutilspro2.26-8ubuntu2vulnerable
Ubuntubinutilspro2.26-8ubuntu2.1vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.1vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.3vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.4vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.5vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.6vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.7vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm1vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm3vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm4vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm5vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm6vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm7vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm9vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm11vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm12vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm13vulnerable
Ubuntubinutilspro2.26.1-1ubuntu1~16.04.8+esm14vulnerable
Ubuntubinutilspro2.29.1-4ubuntu1vulnerable
Ubuntubinutilspro2.29.1-6ubuntu1vulnerable
Ubuntubinutilspro2.29.1-7ubuntu1vulnerable
Ubuntubinutilspro2.29.1-8ubuntu1vulnerable
Ubuntubinutilspro2.29.1-10ubuntu1vulnerable
Ubuntubinutilspro2.29.1-12ubuntu1vulnerable
Ubuntubinutilspro2.30-4ubuntu1vulnerable
Ubuntubinutilspro2.30-5ubuntu1vulnerable
Ubuntubinutilspro2.30-7ubuntu1vulnerable
Ubuntubinutilspro2.30-8ubuntu1vulnerable
Ubuntubinutilspro2.30-9ubuntu1vulnerable
Ubuntubinutilspro2.30-10ubuntu1vulnerable
Ubuntubinutilspro2.30-11ubuntu1vulnerable
Ubuntubinutilspro2.30-14ubuntu2vulnerable
Ubuntubinutilspro2.30-15ubuntu1vulnerable
Ubuntubinutilspro2.30-20ubuntu2~18.04vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.1vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.2vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.3vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.4vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.5vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.7vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.8vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm1vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm3vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm4vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm5vulnerable
Ubuntubinutilspro2.30-21ubuntu1~18.04.9+esm13vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]