CVE-2022-27943

Published: 26 March 2022

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

Notes

Author	Note
sbeattie	gcc-3.3 only provides libstdc++5
litios	affected code introduced in gcc-11.1.0 on 2020-11-13 with 84096498a7b ("libiberty: Support the new ("v0") mangling scheme in rust-demangle")
litios	affected code introduced in binutils in d750c713
eslerm	fixed in gcc-13.1.0 on 2022-07-01 with 9234cdca6ee ("Add a recursion limit to the demangle_const function in the fixed in binutils-2_39 on 2020-01-31 with f10f8617a30 ("Import patch from mainline GCC to fix an infinite recusion in the Rust demangler.")

Priority

Cvss 3 Severity Score

5.5

Score breakdown

Status

Package	Release	Status
binutils Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Needed
	kinetic	Not vulnerable (2.39-1)
	lunar	Not vulnerable (2.39-1)
	mantic	Not vulnerable (2.39-1)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (2.39)
	xenial	Not vulnerable (code not present)
crash Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Ignored (end of standard support)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	impish	Ignored (end of life)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Ignored (end of life)
	jammy	Needed
	kinetic	Ignored (end of life, was needed)
	lunar	Ignored (end of life, was needed)
	mantic	Needed
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-12 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Needed
	lunar	Ignored (end of life, was needed)
	mantic	Needed
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-13 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	lunar	Not vulnerable (13.2.0-2)
	mantic	Not vulnerable (13.2.0-2)
	trusty	Does not exist
	upstream	Not vulnerable (13.2.0-2)
	xenial	Does not exist
gcc-3.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Needs triage
gcc-4.4 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-4.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-4.7 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Needs triage
gcc-4.7-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-4.7-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-4.8 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.8-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-5 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-5-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-6 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-6-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-6-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7-cross Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7-cross-ports Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Ignored (end of life)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8-cross Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	impish	Ignored (end of life)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	impish	Ignored (end of life)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9-cross-ports Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	impish	Ignored (end of life)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-arm-linux-androideabi Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-arm-none-eabi Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-avr Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-defaults Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
gcc-defaults-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-h8300-hms Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-i686-linux-android Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-m68hc1x Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-mingw-w64 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
gcc-msp430 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-opt Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Ignored (end of life)
	jammy	Needs triage
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needs-triage)
	mantic	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Needs triage
gcc-snapshot Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Ignored (end of standard support, was needs-triage)
	impish	Ignored (end of life)
	jammy	Ignored (end of standard support, was needs-triage)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
gccgo-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Does not exist
gccgo-6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
gdb Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Needed
	lunar	Not vulnerable (13.1-2ubuntu2)
	mantic	Not vulnerable (13.2-1ubuntu1)
	trusty	Ignored (end of standard support)
	upstream	Released (12.1-3ubuntu2)
	xenial	Not vulnerable (code not present)
libiberty Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	hirsute	Ignored (end of life)
	jammy	Needed
	kinetic	Not vulnerable (20220713-1)
	lunar	Not vulnerable (20230104-1)
	mantic	Not vulnerable (20230104-1)
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
	Patches: upstream: https://gcc.gnu.org/git/gitweb.cgi?p=gcc.git;h=9234cdca6ee88badfc00297e72f13dac4e540c79

Severity score breakdown

Parameter	Value
Base score	5.5
Attack vector	Local
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Bugs

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›