Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-3549

Fixed in a distro release EPSS <1%

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Published 2021-05-26 · CVE record · OSV

Products: gnu binutils

Distro releases

ReleasePackageFixed in
Arch Linuxbinutils2.37-1
Debian 12binutils2.37-3
Debian 13binutils2.37-3
Debian 14binutils2.37-3
Ubuntu 22.04 LTSbinutils2.37-7ubuntu1