Skip to content
OpenAdvisories
Unscored Public exploit CVE-2021-20294 EUVD-2021-7719GHSA-rrj7-qm3x-w26v

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could …

Published Apr 29, 2021 · Updated Aug 3, 2024 · Assigned by redhat

Package: binutils Ecosystem: Debian

Description

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.

Affected products

VendorProductAffectedFixed
— binutils binutils 2.35.2 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗
ReleasePackageFixed inAdvisory
Debian 14 binutils 2.35.2-1 —
Debian 13 binutils 2.35.2-1 —
Debian 12 binutils 2.35.2-1 —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP3 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1
SLES 15 SP2 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1
SLES 15 SP1 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1
SLES 15 binutils 2.37-6.23.1 SUSE-SU-2022:0934-1
SLES 12 SP5 binutils +2 2.37-9.44.1 SUSE-SU-2021:3637-1
Show 16 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLES 12 SP3 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLES 12 SP2 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLES for SAP 15 SP1 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1
SLES for SAP 15 binutils 2.37-6.23.1 SUSE-SU-2022:0934-1
SLES for SAP 12 SP5 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLES for SAP 12 SP4 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLES for SAP 12 SP3 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SLE HPC 15 SP1 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1
SLE HPC 15 binutils 2.37-6.23.1 SUSE-SU-2022:0934-1
SUSE OpenStack Cloud Crowbar 9 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SUSE OpenStack Cloud Crowbar 8 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SUSE OpenStack Cloud 9 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SUSE OpenStack Cloud 8 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SUSE HPE Helion OpenStack 8 binutils 2.37-9.44.1 SUSE-SU-2021:3637-1
SUSE Enterprise Storage 6 binutils 2.37-7.26.1 SUSE-SU-2021:3643-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed binutils 2.37-3.1 openSUSE-SU-2024:11634-1
openSUSE Leap 15.3 binutils +21 2.37-7.26.1 openSUSE-SU-2021:3643-1
openSUSE Leap 15.2 binutils +21 2.37-lp152.4.9.1 openSUSE-SU-2021:1475-1
openSUSE Leap 15.2 bpftrace 0.11.4-lp152.2.7.1 openSUSE-SU-2021:1475-1

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 gcc10-binutils +2 2.35-21.amzn2.0.1 ALAS2-2021-1702

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 7

References