CVE-2020-35494

Published: Jan 4, 2021Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Exploitability: 1.8 / Impact: 4.2

Source: NVD

Description

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

Affected (8)

Products: Gnu: Binutils · Fedoraproject: Fedora · Broadcom: Brocade Fabric Operating System Firmware · +1 more

Show all products

Gnu: Binutils · Fedoraproject: Fedora · Broadcom: Brocade Fabric Operating System Firmware · Netapp: Cloud Backup, Ontap Select Deploy Administration Utility, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Hci Compute Node Firmware

1 product

1 product

1 product

Brocade Fabric Operating System Firmware

Netapp

5 products

Cloud Backup

Ontap Select Deploy Administration Utility

Solidfire, Enterprise Sds & Hci Storage Node

Solidfire & Hci Management Node

Hci Compute Node Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Before 2.34

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brocade Fabric Operating System Firmware	All versions
Netapp Cloud Backup	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Solidfire, Enterprise Sds & Hci Storage Node	All versions
Netapp Solidfire & Hci Management Node	All versions