https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:06:32 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4364 <p><strong>Affected:</strong> AlmaLinux:8: binutils-devel</p> <p>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.</p> <p>Security Fix(es):</p> <p>* binutils: Excessive debug section size can cause excessive memory consumption in bfd&#39;s dwarf2.c read_section() (CVE-2021-3487)</p> <p>* binutils: Race window allows users to own arbitrary files (CVE-2021-20197)</p> <p>* binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c (CVE-2020-35448)</p> <p>* binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (CVE-2021-20284)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: binutils-devel</p> <p>The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities.</p> <p>Security Fix(es):</p> <p>* binutils: Excessive debug section size can cause excessive memory consumption in bfd&#39;s dwarf2.c read_section() (CVE-2021-3487)</p> <p>* binutils: Race window allows users to own arbitrary files (CVE-2021-20197)</p> <p>* binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c (CVE-2020-35448)</p> <p>* binutils: Heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c (CVE-2021-20284)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4364 https://cve.radiocsirt.org/vuln/bdu:2023-05789 bdu:2023-05789 https://cve.radiocsirt.org/vuln/bdu:2023-05789 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0693 certfr-2025-avi-0693 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0693 https://cve.radiocsirt.org/vuln/cnvd-2021-14748 cnvd-2021-14748 https://cve.radiocsirt.org/vuln/cnvd-2021-14748 https://cve.radiocsirt.org/vuln/euvd-2026-262398 EUVD-2026-262398 https://cve.radiocsirt.org/vuln/euvd-2026-262398 https://cve.radiocsirt.org/vuln/fkie_cve-2021-20197 <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-20197 https://cve.radiocsirt.org/vuln/ghsa-rq67-5wpf-96wv <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> https://cve.radiocsirt.org/vuln/ghsa-rq67-5wpf-96wv https://cve.radiocsirt.org/vuln/gsd-2021-20197 gsd-2021-20197 https://cve.radiocsirt.org/vuln/gsd-2021-20197 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20197 msrc_CVE-2021-20197 https://cve.radiocsirt.org/vuln/msrc_cve-2021-20197 https://cve.radiocsirt.org/vuln/oesa-2021-1153 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: binutils</p> <p>Security Fix(es): There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.(CVE-2021-20197)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: binutils</p> <p>Security Fix(es): There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.(CVE-2021-20197)</p> https://cve.radiocsirt.org/vuln/oesa-2021-1153 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1475-1 <p>Security update for binutils</p> <p>Security update for binutils</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1475-1 https://cve.radiocsirt.org/vuln/suse-su-2021:3593-1 <p>Security update for binutils</p> <p>Security update for binutils</p> https://cve.radiocsirt.org/vuln/suse-su-2021:3593-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20197 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils</p> <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: binutils, Ubuntu:Pro:16.04:LTS: binutils, Ubuntu:Pro:18.04:LTS: binutils, Ubuntu:Pro:20.04:LTS: binutils</p> <p>There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-20197