CVE-2021-3826: Buffer Overflow

Reference Links

• https://gcc.gnu.org/git/?p=gcc.git%3Ba=commit%3Bh=5481040197402be6dfee265bd2ff5a4c88e30505
• https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579987
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG/
• https://gcc.gnu.org/git/?p=gcc.git;a=commit;h=5481040197402be6dfee265bd2ff5a4c88e30505
• https://gcc.gnu.org/pipermail/gcc-patches/2021-September/579985.html
• https://koji.fedoraproject.org/koji/buildinfo?buildID=2055285
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132594
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132586
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132595
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132596
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132587
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2132603
• https://access.redhat.com/errata/RHSA-2023:3269
• https://access.redhat.com/security/cve/cve-2021-3826
• https://access.redhat.com/errata/RHSA-2023:6372
• https://bugzilla.redhat.com/show_bug.cgi?id=2122627
• https://www.cve.org/CVERecord?id=CVE-2021-3826 https://nvd.nist.gov/vuln/detail/CVE-2021-3826

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2023:3269

Frequently Asked Questions

• What is the vulnerability ID for this vulnerability?

  The vulnerability ID for this vulnerability is CVE-2021-3826.

• What is the severity of CVE-2021-3826?

  The severity of CVE-2021-3826 is high with a CVSS score of 7.5.

• What is the description of CVE-2021-3826?

  CVE-2021-3826 is a heap/stack buffer overflow in the dlang_lname function in libiberty, allowing attackers to potentially cause a denial of service (segmentation fault and crash) via a crafted mangled symbol.

• Which software packages are affected by CVE-2021-3826?

  The affected software packages include devtoolset 12-binutils-0:2.36.1-6.el7, GNU GCC 11.2, and Fedora versions 35, 36, and 37.

• How can I fix CVE-2021-3826?

  To fix CVE-2021-3826, it is recommended to update to the latest version of the affected software packages provided by the respective vendors.