CVE-2021-3549
Fixed in a distro release EPSS <1%
An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.
Products: gnu binutils
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | binutils | 2.37-1 |
| Debian 12 | binutils | 2.37-3 |
| Debian 13 | binutils | 2.37-3 |
| Debian 14 | binutils | 2.37-3 |
| Ubuntu 22.04 LTS | binutils | 2.37-7ubuntu1 |