Search for packages
Package details: pkg:alpm/archlinux/binutils@2.35.1-1
purl pkg:alpm/archlinux/binutils@2.35.1-1
Next non-vulnerable version 2.36-1
Latest non-vulnerable version 2.38-1
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-2ef7-dr9v-aaan
Aliases:
CVE-2021-20294
A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability.
2.36-1
Affected by 0 other vulnerabilities.
VCID-hsv6-2w95-aaaq
Aliases:
CVE-2020-35448
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
2.36-1
Affected by 0 other vulnerabilities.
VCID-r4yx-jctz-aaan
Aliases:
CVE-2021-3487
Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt
2.36-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:46:39.522129+00:00 Arch Linux Importer Affected by VCID-hsv6-2w95-aaaq https://security.archlinux.org/AVG-1385 36.0.0
2025-03-28T07:46:39.496468+00:00 Arch Linux Importer Affected by VCID-2ef7-dr9v-aaan https://security.archlinux.org/AVG-1385 36.0.0
2025-03-28T07:46:39.477806+00:00 Arch Linux Importer Affected by VCID-r4yx-jctz-aaan https://security.archlinux.org/AVG-1385 36.0.0
2024-09-18T02:01:59.752991+00:00 Arch Linux Importer Affected by VCID-hsv6-2w95-aaaq https://security.archlinux.org/AVG-1385 34.0.1
2024-09-18T02:01:59.731598+00:00 Arch Linux Importer Affected by VCID-2ef7-dr9v-aaan https://security.archlinux.org/AVG-1385 34.0.1
2024-09-18T02:01:59.712253+00:00 Arch Linux Importer Affected by VCID-r4yx-jctz-aaan https://security.archlinux.org/AVG-1385 34.0.1
2024-01-03T22:28:03.246833+00:00 Arch Linux Importer Affected by VCID-hsv6-2w95-aaaq https://security.archlinux.org/AVG-1385 34.0.0rc1
2024-01-03T22:28:03.227905+00:00 Arch Linux Importer Affected by VCID-2ef7-dr9v-aaan https://security.archlinux.org/AVG-1385 34.0.0rc1
2024-01-03T22:28:03.208770+00:00 Arch Linux Importer Affected by VCID-r4yx-jctz-aaan https://security.archlinux.org/AVG-1385 34.0.0rc1