Medium · published January 4, 2021
There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.
| Product | Versions | Fixed in |
|---|---|---|
| gnu/binutils | < 2.34 | 2.34 |
| redhat/enterprise_linux | all versions | — |
| netapp/hci_compute_node_firmware | all versions | — |
| netapp/cloud_backup | all versions | — |
| netapp/ontap_select_deploy_administration_utility | all versions | — |
| netapp/solidfire\,_enterprise_sds_\&_hci_storage_node | all versions | — |
| netapp/solidfire_\&_hci_management_node | all versions | — |
| broadcom/brocade_fabric_operating_system | all versions | — |