CVE-2016-4491
gdb: The d_print_comp function in cp-demangle.c in libiberty allows remoteattackers to cause a denial of service (segmenta...
CVE-2016-4491 is fixed in 6 products on 1 platform, first by gdb 8.0-0ubuntu3, released February 24, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0177
78th percentile
The d_print_comp function in cp-demangle.c in libiberty allows remoteattackers to cause a denial of service (segmentation fault and crash) via acrafted binary, which triggers infinite recursion and a buffer overflow,related to a node having "itself as ancestor more than once."
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gdb · Ubuntu 24.10 (oracular) | 8.0-0ubuntu3 | gdb 8.0-0ubuntu3 | Feb 24, 2017 |
| gdb · Ubuntu 25.04 (plucky) | 8.0-0ubuntu3 | gdb 8.0-0ubuntu3 | Feb 24, 2017 |
| gdb-multiarch · Ubuntu 24.10 (oracular) | 8.0-0ubuntu3 | gdb-multiarch 8.0-0ubuntu3 | Feb 24, 2017 |
| gdb-multiarch · Ubuntu 25.04 (plucky) | 8.0-0ubuntu3 | gdb-multiarch 8.0-0ubuntu3 | Feb 24, 2017 |
| gdb-source · Ubuntu 24.10 (oracular) | 8.0-0ubuntu3 | gdb-source 8.0-0ubuntu3 | Feb 24, 2017 |
| gdb-source · Ubuntu 25.04 (plucky) | 8.0-0ubuntu3 | gdb-source 8.0-0ubuntu3 | Feb 24, 2017 |
| gdbserver · Ubuntu 24.10 (oracular) | 8.0-0ubuntu3 | gdbserver 8.0-0ubuntu3 | Feb 24, 2017 |
| gdbserver · Ubuntu 25.04 (plucky) | 8.0-0ubuntu3 | gdbserver 8.0-0ubuntu3 | Feb 24, 2017 |
| valgrind · Ubuntu 24.10 (oracular) | 1:3.12.0-1.1ubuntu2 | valgrind 1:3.12.0-1.1ubuntu2 | Feb 24, 2017 |
| valgrind · Ubuntu 25.04 (plucky) | 1:3.12.0-1.1ubuntu2 | valgrind 1:3.12.0-1.1ubuntu2 | Feb 24, 2017 |
| valgrind-mpi · Ubuntu 24.10 (oracular) | 1:3.12.0-1.1ubuntu2 | valgrind-mpi 1:3.12.0-1.1ubuntu2 | Feb 24, 2017 |
| valgrind-mpi · Ubuntu 25.04 (plucky) | 1:3.12.0-1.1ubuntu2 | valgrind-mpi 1:3.12.0-1.1ubuntu2 | Feb 24, 2017 |