CVE-2021-3826

概要

参考情報

• gcc.gnu.org/git · Broken Link
• gcc.gnu.org/pipermail/gcc-patches/2021-September/579987 · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4MYLS3VR4OPL5ECRWOR4ZHMGXUSCJFZY · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6AKZ2DTS3ATVN5PANNVLKLE5OP4OF25Q · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MTEHT3G6YKJ7F7MSGWYSI4UM3XBAYXZ · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AXFC74WRZ2Q7F2TSUKPYNIL7ZPBWYI6L · Mailing List
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H424YXGW7OKXS2NCAP35OP6Y4P4AW6VG · Mailing List
• cert-portal.siemens.com/productcert/html/ssa-398330.html

gcc のその他の脆弱性

• CVE-2023-4039中 4.8**DISPUTED**A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existin…
• CVE-2022-27943中 5.5libiberty/rust-demangle.c in GNU GCC 11.2 allows stack consumption in demangle_const, as demonstrated by nm-new.
• CVE-2021-46195中 5.5GCC v12.0 was discovered to contain an uncontrolled recursion via the component libiberty/rust-demangle.c. This vulnerability allows attacke…
• CVE-2021-37322高 7.8GCC c++filt v2.26 was discovered to contain a use-after-free vulnerability via the component cplus-dem.c.
• CVE-2002-2439高 7.8Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.