CVE-2020-35495

Published: Jan 4, 2021Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

Affected (8)

Products: Gnu: Binutils · Fedoraproject: Fedora · Broadcom: Brocade Fabric Operating System Firmware · +1 more

Show all products

Gnu: Binutils · Fedoraproject: Fedora · Broadcom: Brocade Fabric Operating System Firmware · Netapp: Cloud Backup, Ontap Select Deploy Administration Utility, Solidfire, Enterprise Sds & Hci Storage Node, Solidfire & Hci Management Node, Hci Compute Node Firmware

1 product

1 product

1 product

Brocade Fabric Operating System Firmware

Netapp

5 products

Cloud Backup

Ontap Select Deploy Administration Utility

Solidfire, Enterprise Sds & Hci Storage Node

Solidfire & Hci Management Node

Hci Compute Node Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	Before 2.34

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 32

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Broadcom Brocade Fabric Operating System Firmware	All versions
Netapp Cloud Backup	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Solidfire, Enterprise Sds & Hci Storage Node	All versions
Netapp Solidfire & Hci Management Node	All versions