Oval Definition:	oval:com.ubuntu.bionic:def:20164491000
Revision Date: 2017-02-24 Version: 1 Title: CVE-2016-4491 on Ubuntu 18.04 LTS (bionic) - medium. Description: The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once." Family: unix Class: vulnerability Status: Reference(s): CVE-2016-4491 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information NOT While related to the CVE in some way, the 'binutils' package in bionic is not affected (note: '2.29-1ubuntu1'). OR The 'binutils-h8300-hms' package in bionic is affected and needs fixing. OR The 'gcc-arm-none-eabi' package in bionic is affected and needs fixing. OR The 'gcc-h8300-hms' package in bionic is affected and needs fixing. OR The 'gdb' package in bionic was vulnerable but has been fixed (note: '8.0-0ubuntu3'). OR NOT While related to the CVE in some way, the 'ht' package in bionic is not affected (note: '2.1.0+repack1-1'). OR NOT While related to the CVE in some way, the 'libiberty' package in bionic is not affected (note: '20170627-1'). OR The 'nescc' package in bionic is affected and needs fixing. OR The 'sdcc' package in bionic is affected and needs fixing. OR The 'valgrind' package in bionic was vulnerable but has been fixed (note: '1:3.12.0-1.1ubuntu2').
BACK