This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2021-45078 →

DEBIAN-CVE-2021-45078

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly...

Original description

The description as published by the source.

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.50.20220106-1"}]}]

Debian:13 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.50.20220106-1"}]}]

Debian:14 binutils

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.37.50.20220106-1"}]}]

References

advisory security-tracker.debian.org