CVE-2020-35495
בינונית 5.5
תיאור (מקור, אנגלית)
There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
מדדים
- CVSS 3.1
-
5.5 (MEDIUM)
מקור הציון: NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS — סבירות ניצול
- 1% (אחוזון 100) נכון ל-18/10/2026
- CWE
- CWE-476
מוצרים מושפעים
gnu: binutils; fedoraproject: fedora; netapp: cloud backup; netapp: ontap select deploy administration utility; netapp: solidfire\, enterprise sds \& hci storage node; netapp: solidfire \& hci management node; broadcom: brocade fabric operating system firmware; netapp: hci compute node firmware; netapp: hci compute node
קישורים
- https://bugzilla.redhat.com/show_bug.cgi?id=1911441 ExploitIssue TrackingPatchThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1911441 ExploitIssue TrackingPatchThird Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…
- https://security.gentoo.org/glsa/202107-24 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210212-0007/ Third Party Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorap…
- https://security.gentoo.org/glsa/202107-24 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20210212-0007/ Third Party Advisory