CVE-2020-35493

EPSS 1.1%CWE-20

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

04 ene 2021Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.

Productos afectados

n/a · binutils

Referencias

https://bugzilla.redhat.com/show_bug.cgi?id=1911437 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/https://security.gentoo.org/glsa/202107-24 https://security.netapp.com/advisory/ntap-20210212-0007/