Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-3549

Опубликовано: 26 мая 2021
Источник: nvd
CVSS3: 7.1
CVSS2: 5.8
EPSS Низкий

Описание

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gnu:binutils:2.36:*:*:*:*:*:*:*

EPSS

Процентиль: 41%
0.00193
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 7.1
ubuntu
больше 4 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 6.1
redhat
около 5 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
debian
больше 4 лет назад

An out of bounds flaw was found in GNU binutils objdump utility versio ...

CVSS3: 7.1
github
больше 3 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
fstec
больше 4 лет назад

Уязвимость функции avr_elf32_load_records_from_section() программного средства разработки GNU Binutils, связанная с записью за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 41%
0.00193
Низкий

7.1 High

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-119
CWE-787