CVE-2022-27943

Published: 26 March 2022

libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.

Priority

CVSS 3 base score: 5.5

Status

Package	Release	Status
gcc-10 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-11 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-3.3 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Not vulnerable (code not present)
	impish	Not vulnerable (code not present)
	jammy	Not vulnerable (code not present)
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-4.4 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-4.6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-4.7 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-4.7-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-4.7-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-4.8 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-4.8-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.8-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
	Binaries built from this source package are in Universe and so are supported by the community.
gcc-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-5 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
gcc-5-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)
gcc-6 Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-6-cross Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-6-cross-ports Launchpad, Ubuntu, Debian	bionic	Not vulnerable (code not present)
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-7 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-7-cross Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-7-cross-ports Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-8 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-8-cross Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-8-cross-ports Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-9-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-9-cross-ports Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-arm-linux-androideabi Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-arm-none-eabi Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-avr Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-defaults Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Needs triage
gcc-defaults-arm64-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-armel-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-armhf-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-powerpc-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-defaults-ppc64el-cross Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Does not exist
gcc-h8300-hms Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)needs-triage)
gcc-i686-linux-android Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-m68hc1x Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)needs-triage)
gcc-mingw-w64 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Needs triage
	upstream	Needs triage
	xenial	Ignored (end of standard support)needs-triage)
gcc-msp430 Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-opt Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gcc-snapshot Launchpad, Ubuntu, Debian	bionic	Needs triage
	focal	Needs triage
	impish	Needs triage
	jammy	Needs triage
	trusty	Does not exist
	upstream	Needs triage
	xenial	Ignored (end of standard support)
gccgo-4.9 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Not vulnerable (code not present)
	upstream	Needs triage
	xenial	Does not exist
gccgo-6 Launchpad, Ubuntu, Debian	bionic	Does not exist
	focal	Does not exist
	impish	Does not exist
	jammy	Does not exist
	trusty	Does not exist
	upstream	Needs triage
	xenial	Not vulnerable (code not present)

Notes

Author	Note
sbeattie	gcc-3.3 only provides libstdc++5
eslerm	rust-demangle.c not present until gcc-7

References

Join the discussion

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›