binutils vulnerabilities

2021-10-2516:14:23

Google

osv.dev

gnu binutils

hash lookups

denial of service

arbitrary code

dwarf debug sections

memory consumption

AI Score

7.9

Confidence

High

EPSS

0.002

Percentile

54.1%

JSON

It was discovered that GNU binutils incorrectly handled certain hash
lookups. An attacker could use this issue to cause GNU binutils to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2020-16592)

It was discovered that GNU binutils incorrectly handled certain corrupt
DWARF debug sections. An attacker could possibly use this issue to cause
GNU binutils to consume memory, resulting in a denial of service.
(CVE-2021-3487)