Medium · published January 4, 2021
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/binutils | < 2.34 | 2.34 |
| fedoraproject/fedora | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/solidfire\,_enterprise_sds_\&_hci_storage_node | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| broadcom/brocade_fabric_operating_system_firmware | all versions | — |
| netapp/hci_compute_node_firmware | all versions | — |