Buffer overflow in Gnu Compiler Collection - CVE-2021-3826

Vulnerability identifier: #VU72527

CSH Severity: Low

CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-3826

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the dlang_lname() function in d-demangle.c in libiberty. A local user can perform a denial of service (DoS) attack via a crafted mangled symbol.

Gnu Compiler Collection
Dell EMC Container Storage Modules
Dell EMC PowerProtect Data Protection
Dell Data Protection Central
EMC Cloud Tiering Appliance
Oracle Linux
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Enterprise Storage
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Desktop
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Basesystem
openSUSE Leap
Fedora
OpenShift Virtualization
OpenShift Logging
SUSE Linux Enterprise Module for Packagehub Subpackages
devtoolset-12-binutils (Red Hat package)
mingw-binutils
binutils
cross-spu-binutils-debugsource
binutils-debuginfo
binutils-debugsource
binutils-devel
libctf-nobfd0
libctf-nobfd0-debuginfo
libctf0
libctf0-debuginfo
binutils-gold
binutils-gold-debuginfo
cross-ppc-binutils
cross-ppc-binutils-debuginfo
cross-ppc-binutils-debugsource
cross-spu-binutils
cross-spu-binutils-debuginfo
cross-x86_64-binutils-debuginfo
cross-x86_64-binutils
cross-s390x-binutils-debugsource
cross-s390x-binutils-debuginfo
cross-s390x-binutils
cross-x86_64-binutils-debugsource
cross-sparc64-binutils-debugsource
cross-sparc64-binutils-debuginfo
cross-sparc64-binutils
cross-sparc-binutils-debugsource
cross-sparc-binutils-debuginfo
cross-sparc-binutils
cross-arm-binutils-debugsource
cross-arm-binutils
cross-arm-binutils-debuginfo
cross-avr-binutils-debugsource
cross-avr-binutils
binutils-devel-32bit
cross-ppc64le-binutils-debugsource
cross-ppc64le-binutils-debuginfo
cross-ppc64le-binutils
cross-aarch64-binutils-debugsource
cross-aarch64-binutils-debuginfo
cross-aarch64-binutils
cross-hppa64-binutils-debuginfo
cross-m68k-binutils-debuginfo
cross-m68k-binutils
cross-ia64-binutils-debugsource
cross-ia64-binutils-debuginfo
cross-ia64-binutils
cross-i386-binutils-debugsource
cross-i386-binutils-debuginfo
cross-i386-binutils
cross-hppa64-binutils-debugsource
cross-s390-binutils-debuginfo
cross-hppa64-binutils
cross-hppa-binutils-debugsource
cross-hppa-binutils-debuginfo
cross-hppa-binutils
cross-epiphany-binutils-debugsource
cross-epiphany-binutils-debuginfo
cross-epiphany-binutils
cross-avr-binutils-debuginfo
cross-mips-binutils
cross-s390-binutils-debugsource
cross-s390-binutils
cross-rx-binutils-debugsource
cross-rx-binutils-debuginfo
cross-rx-binutils
cross-riscv64-binutils-debugsource
cross-riscv64-binutils-debuginfo
cross-riscv64-binutils
cross-ppc64-binutils-debugsource
cross-ppc64-binutils-debuginfo
cross-ppc64-binutils
cross-mips-binutils-debugsource
cross-mips-binutils-debuginfo
cross-m68k-binutils-debugsource
gdb (Red Hat package)
mingw-gcc
mingw-gdb
insight
Dell EMC Storage Monitoring and Reporting (SMR)
EMC ViPR SRM
Dell EMC VxRail Appliance

Install updates from vendor's website.

OpenShift Virtualization - addressed in versions 4.13.6, 4.14.1
OpenShift Logging - update to 5.8.1
Dell EMC Container Storage Modules - update to 1.7.0
devtoolset-12-binutils (Red Hat package) - update to 2.36.1-6.el7
mingw-binutils - addressed in versions 2.37-5.fc36, 2.38-5.fc37
binutils - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-spu-binutils-debugsource - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
binutils-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
binutils-debugsource - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
binutils-devel - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
libctf-nobfd0 - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
libctf-nobfd0-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
libctf0 - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
libctf0-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
binutils-gold - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
binutils-gold-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-ppc-binutils - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-ppc-binutils-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-ppc-binutils-debugsource - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-spu-binutils - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-spu-binutils-debuginfo - addressed in versions 2.39-9.50.1, 2.39-150100.7.40.1
cross-x86_64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-x86_64-binutils - update to 2.39-150100.7.40.1
cross-s390x-binutils-debugsource - update to 2.39-150100.7.40.1
cross-s390x-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-s390x-binutils - update to 2.39-150100.7.40.1
cross-x86_64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-sparc64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-sparc64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-sparc64-binutils - update to 2.39-150100.7.40.1
cross-sparc-binutils-debugsource - update to 2.39-150100.7.40.1
cross-sparc-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-sparc-binutils - update to 2.39-150100.7.40.1
cross-arm-binutils-debugsource - update to 2.39-150100.7.40.1
cross-arm-binutils - update to 2.39-150100.7.40.1
cross-arm-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-avr-binutils-debugsource - update to 2.39-150100.7.40.1
cross-avr-binutils - update to 2.39-150100.7.40.1
binutils-devel-32bit - update to 2.39-150100.7.40.1
cross-ppc64le-binutils-debugsource - update to 2.39-150100.7.40.1
cross-ppc64le-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-ppc64le-binutils - update to 2.39-150100.7.40.1
cross-aarch64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-aarch64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-aarch64-binutils - update to 2.39-150100.7.40.1
cross-hppa64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-m68k-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-m68k-binutils - update to 2.39-150100.7.40.1
cross-ia64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-ia64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-ia64-binutils - update to 2.39-150100.7.40.1
cross-i386-binutils-debugsource - update to 2.39-150100.7.40.1
cross-i386-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-i386-binutils - update to 2.39-150100.7.40.1
cross-hppa64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-s390-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-hppa64-binutils - update to 2.39-150100.7.40.1
cross-hppa-binutils-debugsource - update to 2.39-150100.7.40.1
cross-hppa-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-hppa-binutils - update to 2.39-150100.7.40.1
cross-epiphany-binutils-debugsource - update to 2.39-150100.7.40.1
cross-epiphany-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-epiphany-binutils - update to 2.39-150100.7.40.1
cross-avr-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-mips-binutils - update to 2.39-150100.7.40.1
cross-s390-binutils-debugsource - update to 2.39-150100.7.40.1
cross-s390-binutils - update to 2.39-150100.7.40.1
cross-rx-binutils-debugsource - update to 2.39-150100.7.40.1
cross-rx-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-rx-binutils - update to 2.39-150100.7.40.1
cross-riscv64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-riscv64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-riscv64-binutils - update to 2.39-150100.7.40.1
cross-ppc64-binutils-debugsource - update to 2.39-150100.7.40.1
cross-ppc64-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-ppc64-binutils - update to 2.39-150100.7.40.1
cross-mips-binutils-debugsource - update to 2.39-150100.7.40.1
cross-mips-binutils-debuginfo - update to 2.39-150100.7.40.1
cross-m68k-binutils-debugsource - update to 2.39-150100.7.40.1
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.9.0.0
EMC ViPR SRM - update to 4.9.0.0
Dell EMC VxRail Appliance - update to 7.0.411
gdb (Red Hat package) - update to 10.2-11.el9
mingw-gcc - update to 11.2.1-6.fc36
mingw-gdb - update to 12.1-2.fc36
insight - update to 13.0.50.20220502-1.fc35
EMC Cloud Tiering Appliance - update to 13.1.0.2.29

• https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/
• https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=5481040197402be6dfee265bd2ff5a4c88e30505
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/

• Memory corruption in GNU GCC
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in Dell EMC VxRail Appliance
• Red Hat Software Collections update for devtoolset-12-binutils
• Multiple vulnerabilities in Dell EMC SRM and Dell EMC Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Container Storage Modules
• Multiple vulnerabilities in Dell Data Protection Central
• Red Hat Enterprise Linux 9 update for gdb
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in OpenShift Virtualization 4.13
• Multiple vulnerabilities in OpenShift Virtualization 4.14
• Multiple vulnerabilities in Logging Subsystem 5.8 for Red Hat OpenShift
• SUSE update for binutils
• SUSE update for binutils
• Fedora 35 update for insight
• Fedora 36 update for mingw-gdb
• Fedora 36 update for mingw-binutils
• Fedora 37 update for mingw-binutils
• Fedora 36 update for mingw-gcc