vulnerability

Ubuntu: (CVE-2021-3549): binutils vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:P)

Published

May 26, 2021

Added

Nov 19, 2024

Modified

Mar 27, 2026

Description

An out of bounds flaw was found in GNU binutils objdump utility version 2.36. An attacker could use this flaw and pass a large section to avr_elf32_load_records_from_section() probably resulting in a crash or in some cases memory corruption. The highest threat from this vulnerability is to integrity as well as system availability.

Solution

ubuntu-upgrade-binutils

References

CVE-2021-3549
https://attackerkb.com/topics/CVE-2021-3549
CWE-119
CWE-787
EUVD-EUVD-2021-26860
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-26860
https://www.cve.org/CVERecord?id=CVE-2021-3549

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report