CVE-2021-45078

High

Description

stab_xcoff_builtin_type in stabs.c in GNU Binutils through 2.37 allows attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact, as demonstrated by an out-of-bounds write. NOTE: this issue exists because of an incorrect fix for CVE-2018-12699.

SeverityHigh
CVSS7.8
Exploit probability—
ProductGnu Binutils
PublishedDec 15, 2021
First seenDec 15, 2021

How to fix

Affected products

ProductAffected versionsFixed in
gnu binutilsv ≤ 2.37—
fedoraproject fedora34, 35—
redhat enterprise_linux8.0—
debian debian_linux9.0, 10.0, 11.0—
netapp ontap_select_deploy_administration_utilityNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.