A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-binutils-devel | May 4, 2022 | Mar 26, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-gcc10-binutilsamazon-linux-ami-2-upgrade-gcc10-binutils-debuginfoamazon-linux-ami-2-upgrade-gcc10-binutils-develamazon-linux-ami-2-upgrade-gcc10-binutils-gold | Jan 23, 2024 | Mar 26, 2021 | |
| Centos_linux | — | centos-upgrade-binutilscentos-upgrade-binutils-debuginfocentos-upgrade-binutils-debugsourcecentos-upgrade-binutils-devel | Nov 10, 2021 | Mar 26, 2021 |
| Debian | debian-upgrade-binutils | Jul 30, 2024 | Mar 26, 2021 | |
| Dell Powerstore Dsa2023129 | dell-powerstoreos-upgrade-latest | Jan 13, 2026 | Apr 4, 2023 | |
| Dell Powerstore Dsa2023173 | dell-powerstoreos-upgrade-latest | Oct 23, 2025 | Jun 21, 2023 | |
| Gentoo Linux | gentoo-linux-upgrade-sys-devel-binutilsgentoo-linux-upgrade-sys-libs-binutils-libs | Aug 16, 2022 | Mar 26, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-developer-gnu-binutils-2-36-1-11-4-36-0-1-101-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-i386-2-36-1-11-4-36-0-1-101-0oracle-solaris-11-4-upgrade-developer-gnu-binutils-cross-sparc-2-36-1-11-4-36-0-1-101-0 | Aug 27, 2021 | Mar 26, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-binutilsoracle-linux-upgrade-binutils-devel | Nov 17, 2021 | Nov 22, 2020 |
| Redhat_linux | no-fix-redhat-rpm-packageredhat-upgrade-binutilsredhat-upgrade-binutils-debuginforedhat-upgrade-binutils-debugsourceredhat-upgrade-binutils-devel | Nov 10, 2021 | Mar 26, 2021 | |
| Rocky_linux | rocky-upgrade-binutilsrocky-upgrade-binutils-debuginforocky-upgrade-binutils-debugsourcerocky-upgrade-binutils-devel | Mar 12, 2024 | Mar 26, 2021 | |
| Suse | — | suse-upgrade-binutilssuse-upgrade-binutils-develsuse-upgrade-binutils-devel-32bitsuse-upgrade-binutils-goldsuse-upgrade-bpftracesuse-upgrade-bpftrace-toolssuse-upgrade-cross-aarch64-binutilssuse-upgrade-cross-arm-binutilssuse-upgrade-cross-avr-binutilssuse-upgrade-cross-epiphany-binutilssuse-upgrade-cross-hppa-binutilssuse-upgrade-cross-hppa64-binutilssuse-upgrade-cross-i386-binutilssuse-upgrade-cross-ia64-binutilssuse-upgrade-cross-m68k-binutilssuse-upgrade-cross-mips-binutilssuse-upgrade-cross-ppc-binutilssuse-upgrade-cross-ppc64-binutilssuse-upgrade-cross-ppc64le-binutilssuse-upgrade-cross-riscv64-binutilssuse-upgrade-cross-rx-binutilssuse-upgrade-cross-s390-binutilssuse-upgrade-cross-s390x-binutilssuse-upgrade-cross-sparc-binutilssuse-upgrade-cross-sparc64-binutilssuse-upgrade-cross-spu-binutilssuse-upgrade-cross-x86_64-binutilssuse-upgrade-cross-xtensa-binutilssuse-upgrade-libctf-nobfd0suse-upgrade-libctf0 | Nov 3, 2021 | Mar 26, 2021 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Mar 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub