GNU libiberty – Buffer Overflow

Exploit Database
123 阅读

作者： Marcel Böhme

日期： 2017-07-27
类别：
- dos
平台：
- linux
来源：https://www.exploit-db.com/exploits/42386/

Source: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=69687

The attached program binary causes a buffer overflow in cplus-dem.c when it tries to demangle specially crafted function arguments in the binary. Both the buffer size as well as the buffer content are controlled from the binary.

objdump -x -C <file>

nm -C <file>

Tested on the following configurations

* 2.6.32-573.7.1.el6.x86_64 #1 SMP Tue Sep 22 22:00:00 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

* 4.1.12-boot2docker #1 SMP Tue Nov 3 06:03:36 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux

* Binutils versions: 2.20 and 2.26

Proof of Concept:

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/42386.zip

last Exploits
GNU libiberty – Buffer Overflow的更多信息

Xlight FTP Server 3.9.1 – Buffer Overflow (PoC)：
Sticky Notes Widget Version 3.0.6 – Denial of Service (PoC)：
Avtech Software – ActiveX ‘avc781viewer.dll’ Multiple Vulnerabilities：
MiniUPnP 1.4 – Multiple Denial of Service Vulnerabilities：
Microsoft Windows – ‘win32k.sys’ TTF Processing win32k!sbit_Embolden / win32k!ttfdCloseFontContext Use-After-Free (MS16-120)：
Scdbg 1.0 – Buffer overflow DoS：
PHP 5.0.0 – ‘snmpwalk()’ Local Denial of Service：
Microsoft Color Management Module ‘icm32.dll’ – ‘icm32!LHCalc3toX_Di16_Do16_Lut8_G32’ Out-of-Bounds Read (MS17-013)：