Libiberty
CVE-2016-2226
HIGH
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionCVE.org
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
AnalysisAI
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as Buffer Overflow (CWE-119), which allows attackers to corrupt memory to execute arbitrary code or crash the application. Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow. Affected products include: Gnu Libiberty.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use memory-safe languages or bounds-checking. Enable ASLR, DEP/NX, stack canaries. Use safe string functions.
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentati
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attack
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmenta
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/obj
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service
Same weakness CWE-119 – Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today