CVE-2018-12886CWE-209

CVE-2018-12886

High · published May 22, 2019

CVSS v3.0
8.1
EPSS
3%
Percentile
86.0
In the wild
Unconfirmed
What it is

stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances) generate instruction sequences when targeting ARM targets that spill the address of the stack protector guard, which allows an attacker to bypass the protection of -fstack-protector, -fstack-protector-all, -fstack-protector-strong, and -fstack-protector-explicit against stack overflow by controlling what the stack canary is compared against.

The record
Technical detail
CVSS v3.0
8.1 · HIGH
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02738 · 86.0th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2019-05-22T23:29Z
Affected products (1)
ProductVersionsFixed in
gnu/gcc≥ 4.1, ≤ 8.0—
References (6)
https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379&view=markup · [email protected]https://www.gnu.org/software/gcc/gcc-8/changes.html · [email protected]https://gcc.gnu.org/viewcvs/gcc/trunk/gcc/config/arm/arm-protos.h?revision=266379&view=markup · af854a3a-2127-422b-91ae-364da2661108https://www.gnu.org/software/gcc/gcc-8/changes.html · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-398330.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5ehttps://cert-portal.siemens.com/productcert/html/ssa-565386.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 22 MAY 18:42Z
    stack_protect_prologue in cfgexpand.c and stack_protect_epilogue in function.c in GNU Compiler Collection (GCC) 4.1 through 8 (under certain circumstances)…
    cvelistv5