CVE-2020-35493 in Binutils

Riassunto

di MITRE • 04/01/2021

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Divulgazione: 04/01/2021
• Moderazione: accettato
• Voce: VDB-167237
• CPE: pronto
• CWE: CWE-125 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.01085
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Telecommunication

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35493
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35493
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35493/