CVE-2022-27943: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new

Medium severity · published Mar 26, 2022

CVE-2022-27943

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new

5.5

CVSS

EPSS

On KEV

Description

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Attack vector

Local

Complexity

Low

Privileges

None

User interaction

Required

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 61% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Fedora · Fedoraproject

36 · source: NVD

Gcc · Gnu

11.2 · source: NVD

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens

V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens

V3.1.0 before V3.1.5; V3.1.0 before V3.1.5 · source: CISA

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens

V3.1.0 before V3.1.5 · source: CISA

Affected product

Fedora

Fedoraproject

All Fedora CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2022-27943

CVE.org

https://www.cve.org/CVERecord?id=CVE-2022-27943

Exploit

https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105039

lists.fedoraproject.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/

Exploit

https://sourceware.org/bugzilla/show_bug.cgi?id=28995

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-398330.html