CVE-2020-35495CWE-476

CVE-2020-35495

Medium · published January 4, 2021

CVSS v3.1
5.5
EPSS
1%
Percentile
68.3
In the wild
Unconfirmed
What it is

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01212 · 68.3th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2021-01-04T20:15Z
Affected products (8)
ProductVersionsFixed in
gnu/binutils< 2.342.34
fedoraproject/fedoraall versions—
netapp/cloud_backupall versions—
netapp/ontap_select_deploy_administration_utilityall versions—
netapp/solidfire\,_enterprise_sds_\&_hci_storage_nodeall versions—
netapp/solidfire_\&_hci_management_nodeall versions—
broadcom/brocade_fabric_operating_system_firmwareall versions—
netapp/hci_compute_node_firmwareall versions—
References (8)
EPSS history
Timeline
  • 04 JAN 14:23Z
    There's a flaw in binutils /bfd/pef.c
    cvelistv5