CVE-2021-20197
26.03.2021, 17:15
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | binutils | 𝑥 ≤ 2.35 |
| redhat | enterprise_linux | 8.0 |
| netapp | cloud_backup | - |
| netapp | ontap_select_deploy_administration_utility | - |
| netapp | solidfire_\&_hci_management_node | - |
| broadcom | brocade_fabric_operating_system_firmware | - |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| binutils |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| binutils-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| binutils-devel-32bit |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| bpftrace |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| bpftrace-tools |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libctf-nobfd0 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||||
| libctf0 |
|
Red Hat Enterprise Linux Releases
References