2 matches found
binutils: Race window allows users to own arbitrary files
There is an open race window when writing output in the following utilities in GNU binutils1: ar, objcopy, strip, and ranlib. When these utilities are run as a privileged user presumably as part of a script updating binaries across different users, an unprivileged user can trick these utilities...
6.3CVSS7.4AI score0.00304EPSS
SaveExploits0References4
CVE-2021-20197
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user presumably as part of a script updating binaries across different users, an unprivileged user can tric...
6.5AI score0.00304EPSS
SaveExploits0References4
20