Red Hat Security Advisory

RHSA-2021:4364

binutils security update

Released 2021-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) binutils-devel-2.30-108.el8
Red Hat Enterprise Linux BaseOS (v. 8) binutils-2.30-108.el8

Fixes 3 records

TI-2021-03495 CVE-2021-20197 · GHSA-rq67-5wpf-96wv

Link following in binutils

LOW 30

There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00304 Published 2021-03-26 Partial fix CWE-59

TI-2021-03575 CVE-2021-20284 · GHSA-hm3m-qrrw-pfv7

Memory corruption in binutils

LOW 27

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01287 Published 2021-03-26 Partial fix CWE-119

TI-2020-17978 CVE-2020-35448 · GHSA-r2cj-jqqc-j833

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as…

LOW 19

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.01238 Published 2020-12-27 Partial fix CWE-125