NetSight
medium5.5

CVE-2020-35507

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted…

Impact

There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

Affected products

VendorProductAffected versions
GnuBinutils
before 2.34
RedhatEnterprise Linux
Version 8.0
NetappHci Compute Node Firmware
All versions
NetappCloud Backup
All versions
NetappOntap Select Deploy Administration Utility
All versions
NetappSolidfire\, Enterprise Sds \& Hci Storage Node
All versions
NetappSolidfire \& Hci Management Node
All versions
BroadcomBrocade Fabric Operating System
All versions

Weakness classification

References