CVE-2021-3826
published 2022-09-01CVE-2021-3826: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation…
PriorityP425medium6.5CVSS 3.1
AVNACLPRNUIRSUCNINAH
EPSS
1.09%
61.6th percentile
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | < binutils 2.37.50.20220121-1 (bookworm) | binutils 2.37.50.20220121-1 (bookworm) |
| debian | libiberty | < binutils 2.37.50.20220121-1 (bookworm) | binutils 2.37.50.20220121-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| gnu | binutils | >= 0 < 2.37.50.20220121-1 | 2.37.50.20220121-1 |
| gnu | binutils | >= 0 < 2.37.50.20220121-1 | 2.37.50.20220121-1 |
| gnu | binutils | >= 0 < 2.37.50.20220121-1 | 2.37.50.20220121-1 |
| gnu | gcc | — | — |
| gnu | gcc | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv6.5MEDIUM
vendor_debian6.5LOW
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
cisa_ics·2023-12-14
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
ICS Advisory
##
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
Release DateDecember 14, 2023
Alert CodeICSA-23-348-10
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v3 9.8
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
- Vulnerabilities: Improper Restriction of XML External Entity Reference, Time-of-check Time-of-use (TOCTOU) Race Condition, Command Injection, Miss
Red Hat
libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c
vendor_redhat·2021-09-22·CVSS 6.5
CVE-2021-3826 [MEDIUM] CWE-119 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c
libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
A vulnerability was found in Libiberty. A heap and stack buffer overflow found in the dlang_lname function in d-demangle.c leads to a denial of service.
Statement: Libiberty is a component used during compilation. This vulnerability requires a corrupted input file to have already been introduced into your application’s source code. This flaw could then induce a segmentation fault during compile time. However, it would be immediately apparent to the developer or operations team that something is wrong.
In a
Debian
CVE-2021-3826: binutils - Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libibe...
vendor_debian·2021·CVSS 6.5
CVE-2021-3826 [MEDIUM] CVE-2021-3826: binutils - Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libibe...
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
Scope: local
bookworm: resolved (fixed in 2.37.50.20220121-1)
bullseye: open
forky: resolved (fixed in 2.37.50.20220121-1)
sid: resolved (fixed in 2.37.50.20220121-1)
trixie: resolved (fixed in 2.37.50.20220121-1)
GHSA
GHSA-88rg-m78j-x8xw: Heap/stack buffer overflow in the dlang_lname function in d-demangle
ghsa_unreviewed·2022-09-02
CVE-2021-3826 [HIGH] CWE-119 GHSA-88rg-m78j-x8xw: Heap/stack buffer overflow in the dlang_lname function in d-demangle
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
OSV
CVE-2021-3826: Heap/stack buffer overflow in the dlang_lname function in d-demangle
osv·2022-09-01·CVSS 6.5
CVE-2021-3826 [MEDIUM] CVE-2021-3826: Heap/stack buffer overflow in the dlang_lname function in d-demangle
Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=5481040197402be6dfee265bd2ff5a4c88e30505https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=5481040197402be6dfee265bd2ff5a4c88e30505https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/
2022-09-01
Published