CVE-2021-3826

Published: 1 September 2022

Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

Notes

Author	Note
sbeattie	gcc-3.3 only provides libstdc++5 gcc-msp430 is based on gcc-4.6.3 gcc-m68hc1x is based on gcc-3.3.6 gcc-h8300-hms is based on gcc-3.4.6 gcc-i686-linux-android and gcc-arm-linux-androideabi are based on gcc-4.7
eslerm	vulnerable function added in gcc-11.1.0 on 2020-05-14 with 3f30a274913 ("libiberty: Update D symbol demangling for latest ABI spec.") patched for gcc-12.1.0 on 2021-09-23 with 54810401974 ("libiberty: prevent buffer overflow when decoding user input")

Author

Note

sbeattie

gcc-3.3 only provides libstdc++5
gcc-msp430 is based on gcc-4.6.3
gcc-m68hc1x is based on gcc-3.3.6
gcc-h8300-hms is based on gcc-3.4.6
gcc-i686-linux-android and gcc-arm-linux-androideabi are
based on gcc-4.7

eslerm

vulnerable function added in gcc-11.1.0 on 2020-05-14 with 3f30a274913 ("libiberty: Update D symbol demangling for latest ABI spec.") patched for gcc-12.1.0 on 2021-09-23 with 54810401974 ("libiberty: prevent buffer overflow when decoding user input")

Priority

Cvss 3 Severity Score

6.5

Score breakdown

Status

Package	Release	Status
binutils Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (2.37.90.20220126-0ubuntu1)
	lunar	Not vulnerable (2.39-3ubuntu1)
	mantic	Not vulnerable (2.40-2ubuntu4)
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
gcc-10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Needed
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Ignored (end of life, was needed)
	mantic	Needed
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-12 Launchpad, Ubuntu, Debian	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Not vulnerable (12-20220319-1ubuntu1)
	lunar	Not vulnerable (12.2.0-17ubuntu1)
	mantic	Not vulnerable (12.3.0-6ubuntu1)
	trusty	Ignored (end of standard support)
	upstream	Not vulnerable (12.1.0)
	xenial	Ignored (end of standard support)
gcc-13 Launchpad, Ubuntu, Debian	bionic	Ignored (end of standard support)
	focal	Does not exist
	jammy	Does not exist
	lunar	Not vulnerable (13-20230320-1ubuntu1)
	mantic	Not vulnerable (13.2.0-1ubuntu1)
	trusty	Ignored (end of standard support)
	upstream	Not vulnerable (13.1.0)
	xenial	Ignored (end of standard support)
gcc-3.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.4 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-4.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-4.7 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.7-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.7-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.8 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-4.8-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-5 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-5-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-6 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-6-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-6-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-7-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-8-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-9-cross-ports Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-arm-linux-androideabi Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-arm-none-eabi Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable ( 15:12.2.rel1-1)
	mantic	Not vulnerable (15:12.2.rel1-1)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-avr Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was not-affected (code not present))
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-defaults Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-defaults-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-defaults-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-defaults-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-defaults-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-defaults-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gcc-h8300-hms Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-i686-linux-android Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-m68hc1x Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-mingw-w64 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-msp430 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Not vulnerable (code not present)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-opt Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was not-affected (code not present))
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gcc-snapshot Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	kinetic	Ignored (end of life, was needs-triage)
	lunar	Not vulnerable (code not present)
	mantic	Not vulnerable (code not present)
	trusty	Does not exist
	upstream	Released (12.1.0)
	xenial	Not vulnerable (code not present)
gccgo-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Not vulnerable (code not present)
	xenial	Does not exist
gccgo-6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	jammy	Does not exist
	kinetic	Does not exist
	lunar	Does not exist
	mantic	Does not exist
	trusty	Does not exist
	upstream	Not vulnerable (code not present)
	xenial	Not vulnerable (code not present)
gdb Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Not vulnerable (code not present)
	jammy	Not vulnerable (12.1-0ubuntu1~22.04)
	lunar	Not vulnerable (13.1-2ubuntu2)
	mantic	Not vulnerable (14.0.50.20230810-0ubuntu1)
	trusty	Ignored (end of standard support)
	upstream	Needs triage
	xenial	Needs triage
libiberty Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	jammy	Needed
	lunar	Not vulnerable (20230104-1)
	mantic	Not vulnerable (20230721-1)
	trusty	Ignored (end of standard support)
	upstream	Released (gcc-12.1.0)
	xenial	Not vulnerable (code not present)

Severity score breakdown

Parameter	Value
Base score	6.5
Attack vector	Network
Attack complexity	Low
Privileges required	None
User interaction	Required
Scope	Unchanged
Confidentiality	None
Integrity impact	None
Availability impact	High
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›