Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10.2 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.8 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 9.8 Extended Update Support | affected |
|
||||||
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Hardened Images | affected |
|
||||||
| Red Hat | Red Hat Enterprise Linux 10 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 10 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 6 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 7 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 8 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | unaffected | — | ||||||
| Red Hat | Red Hat Enterprise Linux 9 | affected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unknown | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift AI (RHOAI) | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 4 | unaffected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 4 | affected | — | ||||||
| Red Hat | Red Hat OpenShift Container Platform 5 | affected | — |
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Gnu | Gcc |
|
||||||||
| Redhat | Enterprise Linux |
|
||||||||
| Redhat | Hardened Images |
|
||||||||
| Redhat | Openshift Container Platform |
|
Vendor Workaround
Applications can mitigate this issue by avoiding calls to erase_if() on __gnu_pbds::priority_queue containers that use the binary_heap_tag backend. Where predicate-based removal is required, use an alternative container or a different heap backend in application code. Apart from applying a fixed package when one becomes available, no other mitigation is currently available.
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.429% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat enterprise Linux Eus
Redhat rhel Eus |
|
| CPEs | cpe:/a:redhat:rhel_eus:9.8::appstream cpe:/a:redhat:rhel_eus:9.8::crb cpe:/o:redhat:enterprise_linux_eus:10.2 cpe:/o:redhat:rhel_eus:9.8::baseos |
|
| Vendors & Products |
Redhat enterprise Linux Eus
Redhat rhel Eus |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb cpe:/o:redhat:enterprise_linux:9::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.3 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat openshift Ai
|
|
| CPEs | cpe:/a:redhat:openshift_ai | |
| Vendors & Products |
Redhat openshift Ai
|
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat rhel Els
|
|
| CPEs | cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
cpe:/a:redhat:enterprise_linux:10 cpe:/a:redhat:enterprise_linux:8 cpe:/a:redhat:enterprise_linux:9 cpe:/o:redhat:rhel_els:6 cpe:/o:redhat:rhel_els:7 |
| Vendors & Products |
Redhat rhel Els
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:openshift:5 |
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/o:redhat:enterprise_linux:10.2 | |
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:enterprise_linux:8::appstream cpe:/a:redhat:enterprise_linux:8::crb cpe:/o:redhat:enterprise_linux:8::baseos |
|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gnu
Gnu gcc Redhat hardened Images Redhat openshift Container Platform |
|
| Vendors & Products |
Gnu
Gnu gcc Redhat hardened Images Redhat openshift Container Platform |
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
threat_severity
|
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-825 |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A flaw was found in GCC. When an application calls the erase_if function on a binary heap priority queue in libstdc++, the library reallocates storage but fails to update its internal entry pointer. An attacker capable of triggering this operation can exploit this use-after-free condition, leading to a Denial of Service (DoS) via an application crash or potential memory corruption. | |
| Title | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | |
| First Time appeared |
Redhat
Redhat enterprise Linux Redhat hummingbird Redhat openshift |
|
| CPEs | cpe:/a:redhat:hummingbird:1 cpe:/a:redhat:openshift:4 cpe:/o:redhat:enterprise_linux:10 cpe:/o:redhat:enterprise_linux:6 cpe:/o:redhat:enterprise_linux:7 cpe:/o:redhat:enterprise_linux:8 cpe:/o:redhat:enterprise_linux:9 |
|
| Vendors & Products |
Redhat
Redhat enterprise Linux Redhat hummingbird Redhat openshift |
|
| References |
| |
| Metrics |
cvssV3_1
|