A flaw was discovered in GNU libiberty within demangle_path() in rust-demangle.c, as distributed in GNU Binutils version 2.36. A crafted symbol can cause stack memory to be exhausted leading to a crash.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1956423 | Issue Tracking Third Party Advisory |
| https://security.gentoo.org/glsa/202208-30 | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210716-0006/ | Third Party Advisory |
| https://src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch | Patch Third Party Advisory |
Configurations
History
28 Sep 2022, 20:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | (GENTOO) https://security.gentoo.org/glsa/202208-30 - Third Party Advisory |
15 Aug 2022, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Sep 2021, 17:13
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
| CPE | cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:* |
11 Jun 2021, 15:44
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=1956423 - Issue Tracking, Third Party Advisory | |
| References | (MISC) https://src.fedoraproject.org/rpms/binutils/blob/rawhide/f/binutils-CVE-2021-3530.patch - Patch, Third Party Advisory | |
| CPE | cpe:2.3:a:gnu:binutils:2.36:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
07 Jun 2021, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-674 | |
| References |
|
02 Jun 2021, 15:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-02 15:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-3530
Mitre link : CVE-2021-3530
CVE.ORG link : CVE-2021-3530
JSON object : View
Products Affected
netapp
- ontap_select_deploy_administration_utility
gnu
- binutils
CWE
CWE-674
Uncontrolled Recursion