Allocation of Resources Without Limits or Throttling The advisory has been revoked - it doesn't affect any version of package binutils  (opens in a new tab)


Threat Intelligence

EPSS
3.29% (89th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Allocation of Resources Without Limits or Throttling vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-CONAN-BINUTILS-10075180
  • published8 May 2025
  • disclosed28 Jun 2018
  • creditUnknown

Introduced: 28 Jun 2018

CVE-2018-12934  (opens in a new tab)
CWE-770  (opens in a new tab)

Amendment

This was deemed not a vulnerability.

Overview

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling remember_Ktype in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30, allows attackers to trigger excessive memory consumption (aka OOM). This can occur during execution of cxxfilt.

References