Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-3549

Опубликовано: 26 мая 2021
Источник: ubuntu
Приоритет: low
EPSS Низкий
CVSS2: 5.8
CVSS3: 7.1

Описание

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

РелизСтатусПримечание
bionic

not-affected

code not compiled
devel

released

2.37-7ubuntu1
esm-infra-legacy/trusty

not-affected

code not compiled
esm-infra/bionic

not-affected

code not compiled
esm-infra/focal

not-affected

code not compiled
esm-infra/xenial

not-affected

code not compiled
focal

not-affected

code not compiled
groovy

ignored

end of life
hirsute

not-affected

code not compiled
impish

released

2.37-7ubuntu1

Показывать по

Ссылки на источники

EPSS

Процентиль: 41%
0.00193
Низкий

5.8 Medium

CVSS2

7.1 High

CVSS3

Связанные уязвимости

CVSS3: 6.1
redhat
около 5 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
nvd
больше 4 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
debian
больше 4 лет назад

An out of bounds flaw was found in GNU binutils objdump utility versio ...

CVSS3: 7.1
github
больше 3 лет назад

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

CVSS3: 7.1
fstec
больше 4 лет назад

Уязвимость функции avr_elf32_load_records_from_section() программного средства разработки GNU Binutils, связанная с записью за границами буфера в памяти, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 41%
0.00193
Низкий

5.8 Medium

CVSS2

7.1 High

CVSS3