CVE-2021-45078
published 2021-12-15CVE-2021-45078: stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have…
high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | < binutils 2.37.50.20220106-1 (bookworm) | binutils 2.37.50.20220106-1 (bookworm) |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| gnu | binutils | <= 2.37 | — |
| gnu | binutils | >= 0 < 2.37.50.20220106-1 | 2.37.50.20220106-1 |
| gnu | binutils | >= 0 < 2.37.50.20220106-1 | 2.37.50.20220106-1 |
| gnu | binutils | >= 0 < 2.37.50.20220106-1 | 2.37.50.20220106-1 |
| gnu | binutils | >= 0 < 2.26.1-1ubuntu1~16.04.8+esm3 | 2.26.1-1ubuntu1~16.04.8+esm3 |
| msrc | cbl2_binutils_2.37-3_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_binutils_2.36.1-2_on_cbl_mariner_1.0 | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv9.8CRITICAL