First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2018-9996

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An issue was discovered in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. Stack Exhaustion occurs in the C++ demangling functions provided by libiberty, and there are recursive stack frames: demangle_template_value_parm, demangle_integral_value, and demangle_expression.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-674

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/103733Third Party Advisory, VDB Entry
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304Exploit, Issue Tracking, Third Party Advisory
http://www.securityfocus.com/bid/103733Third Party Advisory, VDB Entry
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=85304Exploit, Issue Tracking, Third Party Advisory

Timeline

Published: Apr 10, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-99976.1Cross-site scripting (XSS) vulnerability in mail compose in Open-Xchange OX App Suite before 7.6.3-rev31, 7.8.x before 7.8.2-rev31, 7.8.3 be CVE-2018-99986.5Open-Xchange OX App Suite before 7.6.3-rev37, 7.8.x before 7.8.2-rev40, 7.8.3 before 7.8.3-rev48, and 7.8.4 before 7.8.4-rev28 include folde CVE-2018-99995.4In Zulip Server versions before 1.7.2, there was an XSS issue with user uploads and the (default) LOCAL_UPLOADS_DIR storage backend.

CVE-2018-9996: Medium severity, CVSS 5.5 | Vulnix