Skip to main content
Version: latest

CVE-2018-20657

CVE Details

CVE-2018-20657

Last Update

08/16/2024

NIST CVE Summary

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, has a memory leak via a crafted string, leading to a denial of service (memory consumption), as demonstrated by cxxfilt, a related issue to CVE-2018-12698.

Our Official Summary

Waiting on a fix from third party mongodb & calico vendors

CVE Severity

7.5

Status

Ongoing

Affected Products & Versions

  • Palette VerteX 4.4.14

Revision History

  • 1.0 08/16/2024 Initial Publication
  • 2.0 08/17/2024 Added palette VerteX 4.4.14 to Affected Products