CVE-2020-35494CWE-908

CVE-2020-35494

Medium · published January 4, 2021

CVSS v3.1
6.1
EPSS
1%
Percentile
66.0
In the wild
Unconfirmed
What it is

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01126 · 66.0th percentile
Weakness
CWE-908 · Use of Uninitialized Resource
Published
2021-01-04T20:15Z
Affected products (8)
ProductVersionsFixed in
gnu/binutils< 2.342.34
fedoraproject/fedoraall versions—
netapp/cloud_backupall versions—
netapp/ontap_select_deploy_administration_utilityall versions—
netapp/solidfire\,_enterprise_sds_\&_hci_storage_nodeall versions—
netapp/solidfire_\&_hci_management_nodeall versions—
broadcom/brocade_fabric_operating_system_firmwareall versions—
netapp/hci_compute_node_firmwareall versions—
References (8)
EPSS history
Timeline
  • 04 JAN 14:23Z
    There's a flaw in binutils /opcodes/tic4x-dis.c
    cvelistv5