CVE-2016-4491

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2016/05/05/5Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/90016
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70909Issue Tracking
https://gcc.gnu.org/ml/gcc-patches/2016-05/msg00105.htmlPatch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/05/05/5Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/90016
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=70909Issue Tracking
https://gcc.gnu.org/ml/gcc-patches/2016-05/msg00105.htmlPatch, Vendor Advisory

Timeline

Published: Feb 24, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-44924.4Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault CVE-2016-44935.5The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denia CVE-2016-44948.8Cross-site request forgery (CSRF) vulnerability on KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allows remote attackers to h CVE-2016-44955.3KMC Controls BAC-5051E devices with firmware before E0.2.0.2 allow remote attackers to bypass intended access restrictions and read a config CVE-2016-44964.2Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (out-of-bounds write) or possibly have unsp CVE-2016-44974.2Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service or possibly have unspecified other impact v CVE-2016-44985.5Panasonic FPWIN Pro 5.x through 7.x before 7.130 accesses an uninitialized pointer, which allows local users to cause a denial of service or CVE-2016-44994.2Heap-based buffer overflow in Panasonic FPWIN Pro 5.x through 7.x before 7.130 allows local users to cause a denial of service (application CVE-2016-45005.8Moxa UC-7408 LX-Plus devices allow remote authenticated users to write to the firmware, and consequently render a device unusable, by levera CVE-2016-45019.1Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier mishandles sessions, which allows remote attackers to bypass a CVE-2016-45027.5Environmental Systems Corporation (ESC) 8832 Data Controller 3.02 and earlier allows remote attackers to bypass intended access restrictions CVE-2016-45039.8Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vecto