This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-3549 →

DEBIAN-CVE-2021-3549

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_lo...

Original description

The description as published by the source.

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37-3"}]}]

References

advisory security-tracker.debian.org