@@ -, +, @@ vulnerability in binutils --- security/vuxml/vuln-2021.xml | 31 +++++++++++++++++++++++++++++++ 1 file changed, 31 insertions(+) --- b/security/vuxml/vuln-2021.xml +++ b/security/vuxml/vuln-2021.xml @@ -1,3 +1,34 @@ + + binutils -- excessive debug section size can cause excessive memory consumption in bfd's dwarf2.c read_section() + + + binutils + 2.33.1_5 + + + + +

Hao Wang reports:

+
+

+ There's a flaw in the BFD library of binutils in versions before 2.36. + An attacker who supplies a crafted file to an application linked with BFD, + and using the DWARF functionality, could cause an impact to system + availability by way of excessive memory consumption. +

+
+ + + + CVE-2021-3487 + https://sourceware.org/bugzilla/show_bug.cgi?id=26946 + + + 2020-11-25 + 2021-08-13 + + + lynx -- SSL certificate validation error --