CVE-2018-20673 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2018-20673 Interim 1 76 2025-04-07T23:49:16Z current 2021-05-30T14:19:49Z 2025-04-07T23:49:16Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2018-20673 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.5 SUSE Enterprise Storage 7 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Liberty Linux 8 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Package Hub 15 SUSE Linux Enterprise Module for Package Hub 15 SP1 SUSE Linux Enterprise Module for Package Hub 15 SP3 SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Linux Enterprise Real Time 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Business Critical Linux 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Manager Proxy 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Retail Branch Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Manager Server 4.1 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils binutils-devel binutils-devel-32bit binutils-gold cpp-8.5.0-3.el8 gcc-8.5.0-3.el8 gcc-c++-8.5.0-3.el8 gcc-gdb-plugin-8.5.0-3.el8 gcc-gfortran-8.5.0-3.el8 gcc-offload-nvptx-8.5.0-3.el8 gcc-plugin-devel-8.5.0-3.el8 libasan-8.5.0-3.el8 libatomic-8.5.0-3.el8 libatomic-static-8.5.0-3.el8 libctf-nobfd0 libctf0 libgcc-8.5.0-3.el8 libgfortran-8.5.0-3.el8 libgomp-8.5.0-3.el8 libgomp-offload-nvptx-8.5.0-3.el8 libitm-8.5.0-3.el8 libitm-devel-8.5.0-3.el8 liblsan-8.5.0-3.el8 libquadmath-8.5.0-3.el8 libquadmath-devel-8.5.0-3.el8 libstdc++-8.5.0-3.el8 libstdc++-devel-8.5.0-3.el8 libstdc++-docs-8.5.0-3.el8 libstdc++-static-8.5.0-3.el8 libtsan-8.5.0-3.el8 libubsan-8.5.0-3.el8 cpp-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-c++-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-gdb-plugin-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-gfortran-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-offload-nvptx-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 gcc-plugin-devel-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libasan-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libatomic-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libatomic-static-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libgcc-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libgfortran-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libgomp-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libgomp-offload-nvptx-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libitm-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libitm-devel-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 liblsan-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libquadmath-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libquadmath-devel-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libstdc++-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libstdc++-devel-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libstdc++-docs-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libstdc++-static-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libtsan-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 libubsan-8.5.0-3.el8 as a component of SUSE Liberty Linux 8 binutils as a component of SUSE CaaS Platform 4.5 binutils as a component of SUSE Enterprise Storage 7 binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS binutils as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils-devel-32bit as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS libctf0 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libctf-nobfd0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 libctf0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libctf-nobfd0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 libctf0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP4 binutils as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 binutils-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libctf-nobfd0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 libctf0 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 SP3 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 binutils-devel-32bit as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 binutils as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP1 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP3 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 binutils-gold as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 binutils as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 binutils as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils-devel as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils-devel-32bit as a component of SUSE Linux Enterprise Real Time 15 SP2 libctf-nobfd0 as a component of SUSE Linux Enterprise Real Time 15 SP2 libctf0 as a component of SUSE Linux Enterprise Real Time 15 SP2 binutils as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils-devel-32bit as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libctf-nobfd0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS libctf0 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS binutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 binutils as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP2 binutils as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils-devel-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libctf-nobfd0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 libctf0 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 binutils as a component of SUSE Manager Proxy 4.1 binutils as a component of SUSE Manager Retail Branch Server 4.1 binutils as a component of SUSE Manager Server 4.1 The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm. CVE-2018-20673 SUSE Liberty Linux 8:cpp-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-c++-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-gdb-plugin-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-gfortran-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-offload-nvptx-8.5.0-3.el8 SUSE Liberty Linux 8:gcc-plugin-devel-8.5.0-3.el8 SUSE Liberty Linux 8:libasan-8.5.0-3.el8 SUSE Liberty Linux 8:libatomic-8.5.0-3.el8 SUSE Liberty Linux 8:libatomic-static-8.5.0-3.el8 SUSE Liberty Linux 8:libgcc-8.5.0-3.el8 SUSE Liberty Linux 8:libgfortran-8.5.0-3.el8 SUSE Liberty Linux 8:libgomp-8.5.0-3.el8 SUSE Liberty Linux 8:libgomp-offload-nvptx-8.5.0-3.el8 SUSE Liberty Linux 8:libitm-8.5.0-3.el8 SUSE Liberty Linux 8:libitm-devel-8.5.0-3.el8 SUSE Liberty Linux 8:liblsan-8.5.0-3.el8 SUSE Liberty Linux 8:libquadmath-8.5.0-3.el8 SUSE Liberty Linux 8:libquadmath-devel-8.5.0-3.el8 SUSE Liberty Linux 8:libstdc++-8.5.0-3.el8 SUSE Liberty Linux 8:libstdc++-devel-8.5.0-3.el8 SUSE Liberty Linux 8:libstdc++-docs-8.5.0-3.el8 SUSE Liberty Linux 8:libstdc++-static-8.5.0-3.el8 SUSE Liberty Linux 8:libtsan-8.5.0-3.el8 SUSE Liberty Linux 8:libubsan-8.5.0-3.el8 SUSE CaaS Platform 4.5:binutils SUSE Enterprise Storage 7:binutils SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS:libctf0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS:libctf0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:binutils-devel-32bit SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libctf-nobfd0 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:libctf0 SUSE Linux Enterprise Module for Basesystem 15 SP3:binutils SUSE Linux Enterprise Module for Basesystem 15 SP3:binutils-devel SUSE Linux Enterprise Module for Basesystem 15 SP3:libctf-nobfd0 SUSE Linux Enterprise Module for Basesystem 15 SP3:libctf0 SUSE Linux Enterprise Module for Basesystem 15 SP4:binutils SUSE Linux Enterprise Module for Basesystem 15 SP4:binutils-devel SUSE Linux Enterprise Module for Basesystem 15 SP4:libctf-nobfd0 SUSE Linux Enterprise Module for Basesystem 15 SP4:libctf0 SUSE Linux Enterprise Module for Basesystem 15 SP5:binutils SUSE Linux Enterprise Module for Basesystem 15 SP5:binutils-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:libctf-nobfd0 SUSE Linux Enterprise Module for Basesystem 15 SP5:libctf0 SUSE Linux Enterprise Module for Basesystem 15:binutils SUSE Linux Enterprise Module for Basesystem 15:binutils-devel SUSE Linux Enterprise Module for Development Tools 15 SP3:binutils SUSE Linux Enterprise Module for Development Tools 15 SP3:binutils-devel-32bit SUSE Linux Enterprise Module for Development Tools 15 SP4:binutils SUSE Linux Enterprise Module for Development Tools 15 SP4:binutils-devel-32bit SUSE Linux Enterprise Module for Development Tools 15 SP5:binutils SUSE Linux Enterprise Module for Development Tools 15 SP5:binutils-devel-32bit SUSE Linux Enterprise Module for Development Tools 15:binutils SUSE Linux Enterprise Module for Development Tools 15:binutils-devel-32bit SUSE Linux Enterprise Module for Package Hub 15 SP1:binutils SUSE Linux Enterprise Module for Package Hub 15 SP1:binutils-gold SUSE Linux Enterprise Module for Package Hub 15 SP3:binutils SUSE Linux Enterprise Module for Package Hub 15 SP3:binutils-gold SUSE Linux Enterprise Module for Package Hub 15 SP4:binutils SUSE Linux Enterprise Module for Package Hub 15 SP4:binutils-gold SUSE Linux Enterprise Module for Package Hub 15 SP5:binutils SUSE Linux Enterprise Module for Package Hub 15 SP5:binutils-gold SUSE Linux Enterprise Module for Package Hub 15:binutils SUSE Linux Enterprise Module for Package Hub 15:binutils-gold SUSE Linux Enterprise Real Time 15 SP2:binutils SUSE Linux Enterprise Real Time 15 SP2:binutils-devel SUSE Linux Enterprise Real Time 15 SP2:binutils-devel-32bit SUSE Linux Enterprise Real Time 15 SP2:libctf-nobfd0 SUSE Linux Enterprise Real Time 15 SP2:libctf0 SUSE Linux Enterprise Server 15 SP2-LTSS:binutils SUSE Linux Enterprise Server 15 SP2-LTSS:binutils-devel SUSE Linux Enterprise Server 15 SP2-LTSS:binutils-devel-32bit SUSE Linux Enterprise Server 15 SP2-LTSS:libctf-nobfd0 SUSE Linux Enterprise Server 15 SP2-LTSS:libctf0 SUSE Linux Enterprise Server Business Critical Linux 15 SP1:binutils SUSE Linux Enterprise Server Business Critical Linux 15 SP2:binutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:binutils-devel-32bit SUSE Linux Enterprise Server for SAP Applications 15 SP2:libctf-nobfd0 SUSE Linux Enterprise Server for SAP Applications 15 SP2:libctf0 SUSE Manager Proxy 4.1:binutils SUSE Manager Retail Branch Server 4.1:binutils SUSE Manager Server 4.1:binutils low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.3 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L