Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-znqk-35mz-dqfk
Vulnerability ID VCID-znqk-35mz-dqfk
Aliases CVE-2021-20197
Summary Multiple vulnerabilities have been discovered in Binutils, the worst of which could result in denial of service.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-59 Improper Link Resolution Before File Access ('Link Following')
System Score Found at
cvssv3 4.2 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20197.json
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
epss 0.00115 https://api.first.org/data/v1/epss?cve=CVE-2021-20197
cvssv3.1 6.3 https://bugzilla.redhat.com/show_bug.cgi?id=1913743
ssvc Track https://bugzilla.redhat.com/show_bug.cgi?id=1913743
cvssv3.1 6.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
archlinux Medium https://security.archlinux.org/AVG-1540
cvssv3.1 6.3 https://security.gentoo.org/glsa/202208-30
ssvc Track https://security.gentoo.org/glsa/202208-30
cvssv3.1 6.3 https://security.netapp.com/advisory/ntap-20210528-0009/
ssvc Track https://security.netapp.com/advisory/ntap-20210528-0009/
cvssv3.1 6.3 https://sourceware.org/bugzilla/show_bug.cgi?id=26945
ssvc Track https://sourceware.org/bugzilla/show_bug.cgi?id=26945
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20197.json
https://api.first.org/data/v1/epss?cve=CVE-2021-20197
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-20197
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1913743 https://bugzilla.redhat.com/show_bug.cgi?id=1913743
AVG-1540 https://security.archlinux.org/AVG-1540
GLSA-202208-30 https://security.gentoo.org/glsa/202208-30
ntap-20210528-0009 https://security.netapp.com/advisory/ntap-20210528-0009/
RHSA-2021:4364 https://access.redhat.com/errata/RHSA-2021:4364
show_bug.cgi?id=26945 https://sourceware.org/bugzilla/show_bug.cgi?id=26945
No exploits are available.
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-20197.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://bugzilla.redhat.com/show_bug.cgi?id=1913743
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-03T15:08:08Z/ Found at https://bugzilla.redhat.com/show_bug.cgi?id=1913743
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://security.gentoo.org/glsa/202208-30
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-03T15:08:08Z/ Found at https://security.gentoo.org/glsa/202208-30
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://security.netapp.com/advisory/ntap-20210528-0009/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-03T15:08:08Z/ Found at https://security.netapp.com/advisory/ntap-20210528-0009/
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N Found at https://sourceware.org/bugzilla/show_bug.cgi?id=26945
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-03T15:08:08Z/ Found at https://sourceware.org/bugzilla/show_bug.cgi?id=26945
Exploit Prediction Scoring System (EPSS)
Percentile 0.30284
EPSS Score 0.00115
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:02:47.126503+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/202208-30 38.0.0