This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-3530 →

DEBIAN-CVE-2021-3530

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can ca...

Original description

The description as published by the source.

A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.90.20220207-1"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.90.20220207-1"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.90.20220207-1"}]}]

References

advisory security-tracker.debian.org