CVE-2021-37322

A use-after-free flaw was found in binutils’ cxxfilt functionality. The attack needs to be initiated locally where an attacker could convince a victim to read a specially crafted file which is processed by cxxfilt, leading to disclosure of memory and possibly leading to the execution of arbitrary code or causing the utility to crash.

Red Hat Product Security has rated this issue as having Moderate security impact and the issue is not currently planned to be addressed in future updates for Red Hat Enterprise Linux 6 and 7. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Red Hat Enterprise Linux 8 and above are shipped with binutils v2.30 and upper versions which are not affected by this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.