CVE-2021-46174

published 2023-08-22

CVE-2021-46174: Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

Heap-based Buffer Overflow in function bfd_getl32 in Binutils objdump 3.37.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	binutils	< binutils 2.37.90.20220207-1 (bookworm)	binutils 2.37.90.20220207-1 (bookworm)
gnu	binutils	< 2.38	2.38
gnu	binutils	>= 0 < 2.37.90.20220207-1	2.37.90.20220207-1
gnu	binutils	>= 0 < 2.37.90.20220207-1	2.37.90.20220207-1
gnu	binutils	>= 0 < 2.37.90.20220207-1	2.37.90.20220207-1
gnu	binutils	>= 0 < 2.34-6ubuntu1.7	2.34-6ubuntu1.7
gnu	binutils	>= 0 < 2.38-4ubuntu2.4	2.38-4ubuntu2.4
gnu	binutils	>= 0 < 2.24-5ubuntu14.2+esm3	2.24-5ubuntu14.2+esm3
gnu	binutils	>= 0 < 2.24-5ubuntu14.2+esm6	2.24-5ubuntu14.2+esm6
gnu	binutils	>= 0 < 2.26.1-1ubuntu1~16.04.8+esm7	2.26.1-1ubuntu1~16.04.8+esm7
gnu	binutils	>= 0 < 2.30-21ubuntu1~18.04.9+esm1	2.30-21ubuntu1~18.04.9+esm1

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

osv 8.8 HIGH

CWE-787