Medium · published January 4, 2021
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/binutils | < 2.34 | 2.34 |
| fedoraproject/fedora | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/solidfire\,_enterprise_sds_\&_hci_storage_node | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| broadcom/brocade_fabric_operating_system_firmware | all versions | — |
| netapp/hci_compute_node_firmware | all versions | — |