Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libiberty@20141014-1
purl pkg:deb/debian/libiberty@20141014-1
Next non-vulnerable version 20190122-1
Latest non-vulnerable version 20230104-1
Risk 6.8
Vulnerabilities affecting this package (9)
Vulnerability Summary Fixed by
VCID-5ans-3drb-7yer
Aliases:
CVE-2016-4488
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."
20161220-1
Affected by 1 other vulnerability.
VCID-5b37-sucb-1fav
Aliases:
CVE-2016-6131
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.
20161220-1
Affected by 1 other vulnerability.
VCID-934s-drs5-33en
Aliases:
CVE-2016-4490
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
20161220-1
Affected by 1 other vulnerability.
VCID-nyhf-vc2f-2ug9
Aliases:
CVE-2016-4493
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.
20161220-1
Affected by 1 other vulnerability.
VCID-q3r5-atgh-tqgf
Aliases:
CVE-2016-2226
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.
20161220-1
Affected by 1 other vulnerability.
VCID-qkwh-nb7j-47fq
Aliases:
CVE-2016-4491
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."
20190122-1
Affected by 0 other vulnerabilities.
VCID-rdcf-a3h2-4qgd
Aliases:
CVE-2016-4492
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.
20161220-1
Affected by 1 other vulnerability.
VCID-vmtn-rv3c-j7dg
Aliases:
CVE-2016-4489
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."
20161220-1
Affected by 1 other vulnerability.
VCID-w24z-j31j-sqcr
Aliases:
CVE-2016-4487
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."
20161220-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T03:50:47.471514+00:00 Debian Oval Importer Affected by VCID-rdcf-a3h2-4qgd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T02:43:18.118133+00:00 Debian Oval Importer Affected by VCID-qkwh-nb7j-47fq https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T02:34:52.475826+00:00 Debian Oval Importer Affected by VCID-vmtn-rv3c-j7dg https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:50:47.763810+00:00 Debian Oval Importer Affected by VCID-5b37-sucb-1fav https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:47:23.553065+00:00 Debian Oval Importer Affected by VCID-q3r5-atgh-tqgf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:29:13.183647+00:00 Debian Oval Importer Affected by VCID-nyhf-vc2f-2ug9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:24:08.617894+00:00 Debian Oval Importer Affected by VCID-934s-drs5-33en https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T01:16:14.391654+00:00 Debian Oval Importer Affected by VCID-5ans-3drb-7yer https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-06T00:33:34.125360+00:00 Debian Oval Importer Affected by VCID-w24z-j31j-sqcr https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0