CVE-2021-20284

5.5 mediumEPSS 1.3%

Medium (5.5). EPSS 1.3% chance of exploitation in the next 30 days.

A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWEs: CWE-119, CWE-787
Published: 2021-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gnu:binutils
netapp:cloud_backup
netapp:ontap_select_deploy_administration_utility

References

https://bugzilla.redhat.com/show_bug.cgi?id=1937784
https://security.gentoo.org/glsa/202208-30
https://security.netapp.com/advisory/ntap-20210521-0010/
https://sourceware.org/bugzilla/show_bug.cgi?id=26931
https://bugzilla.redhat.com/show_bug.cgi?id=1937784

Check your stack JSON