VDB

DEBIAN-CVE-2021-20284

DEBIAN-CVE-2021-20284 PUBLISHED CVSS 5.5 MEDIUM

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Debian:11binutils2.38-3, 2.35.50.20210106-1, 2.39.50.20221224-1
Debian:13binutils0, 0, 0
Debian:12binutils0, 0, 0
Debian:14binutils0, 0, 0

Timeline

  • Mar 26, 2021 CVE Published
  • Apr 28, 2026 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›