REDHAT-BUG-1913743: Medium severity binutils vulnerability
There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink.
Reference:
https://sourceware.org/bugzilla/showbug.cgi?id=26945
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1913743?
The severity of REDHAT-BUG-1913743 is considered high due to the potential for privilege escalation by unprivileged users.
How do I fix REDHAT-BUG-1913743?
To fix REDHAT-BUG-1913743, update to GNU binutils version 2.36 or later where the race condition has been resolved.
What utilities are affected by REDHAT-BUG-1913743?
The utilities affected by REDHAT-BUG-1913743 include ar, objcopy, strip, and ranlib in GNU binutils version 2.35 and earlier.
Who is at risk from REDHAT-BUG-1913743?
Users running GNU binutils version 2.35 or earlier as privileged users are at risk from REDHAT-BUG-1913743.
What type of vulnerability is REDHAT-BUG-1913743 classified as?
REDHAT-BUG-1913743 is classified as a race condition vulnerability that may lead to privilege escalation.