Oval Definition:	oval:com.ubuntu.cosmic:def:2018128860000000
Revision Date: 2019-05-22 Version: 1 Title: CVE-2018-12886 on Ubuntu 18.10 (cosmic) - low. Description: stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against. Family: unix Class: vulnerability Status: Reference(s): CVE-2018-12886 Platform(s): Ubuntu 18.10 Product(s): Definition Synopsis Ubuntu 18.10 (cosmic) is installed. AND Package Information gcc-4.8: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-6: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-7: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-8: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-arm-none-eabi: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-avr: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-h8300-hms: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-m68hc1x: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-msp430: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life'). OR gcc-snapshot: while related to the CVE in some way, a decision has been made to ignore this issue (note: 'reached end-of-life').
BACK