Out-of-bounds write in Binutils - CVE-2021-20294

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU66491

Out-of-bounds write in Binutils - CVE-2021-20294

Published: August 15, 2022 / Updated: January 22, 2023


Vulnerability identifier: #VU66491
CSH Severity: Medium
CVSS v4: 7.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-20294
CWE-ID: CWE-787
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in readelf. A remote attacker can create a specially crafted file, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.


Affected software

Binutils
Gentoo Linux
SUSE CaaS Platform
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Packagehub Subpackages
binutils-devel-32bit
binutils
binutils-debuginfo
binutils-debugsource
binutils-devel
libctf-nobfd0
libctf-nobfd0-debuginfo
libctf0
libctf0-debuginfo
binutils-gold-debuginfo
binutils-gold
cross-ppc-binutils
cross-ppc-binutils-debuginfo
cross-ppc-binutils-debugsource
cross-spu-binutils
cross-spu-binutils-debuginfo
cross-spu-binutils-debugsource
sys-libs/binutils-libs
sys-devel/binutils
PowerStore T
PowerStore X

How to mitigate CVE-2021-20294

Install updates from vendor's website.

Binutils - update to 2.35.2
binutils-devel-32bit - addressed in versions 2.37-6.23.1, 2.37-7.26.1
binutils - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
binutils-debuginfo - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
binutils-debugsource - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
binutils-devel - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
libctf-nobfd0 - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
libctf-nobfd0-debuginfo - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
libctf0 - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
libctf0-debuginfo - addressed in versions 2.37-6.23.1, 2.37-7.26.1, 2.37-9.44.1
binutils-gold-debuginfo - addressed in versions 2.37-7.26.1, 2.37-9.44.1
binutils-gold - addressed in versions 2.37-7.26.1, 2.37-9.44.1
cross-ppc-binutils - update to 2.37-9.44.1
cross-ppc-binutils-debuginfo - update to 2.37-9.44.1
cross-ppc-binutils-debugsource - update to 2.37-9.44.1
cross-spu-binutils - update to 2.37-9.44.1
cross-spu-binutils-debuginfo - update to 2.37-9.44.1
cross-spu-binutils-debugsource - update to 2.37-9.44.1
sys-libs/binutils-libs - update to 2.38
sys-devel/binutils - update to 2.38
PowerStore T - update to 3.2.1.0-1989710
PowerStore X - update to 3.2.1.0-1989710

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins