Vulnerability Details CVE-2020-35496
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.3%
CVSS Severity
CVSS v3 Score 5.5
CVSS v2 Score 4.3
Products affected by CVE-2020-35496
-
_enterprise_sds_&_hci_storage_node:-
-
-
cpe:2.3:a:gnu:binutils:2.10
-
cpe:2.3:a:gnu:binutils:2.10.1
-
cpe:2.3:a:gnu:binutils:2.10.1a
-
cpe:2.3:a:gnu:binutils:2.11
-
cpe:2.3:a:gnu:binutils:2.11.1
-
cpe:2.3:a:gnu:binutils:2.11.2
-
cpe:2.3:a:gnu:binutils:2.11.2a
-
cpe:2.3:a:gnu:binutils:2.12
-
cpe:2.3:a:gnu:binutils:2.12.1
-
cpe:2.3:a:gnu:binutils:2.12.1a
-
cpe:2.3:a:gnu:binutils:2.13
-
cpe:2.3:a:gnu:binutils:2.13.1
-
cpe:2.3:a:gnu:binutils:2.13.2
-
cpe:2.3:a:gnu:binutils:2.13.2.1
-
cpe:2.3:a:gnu:binutils:2.13.2.1a
-
cpe:2.3:a:gnu:binutils:2.14
-
cpe:2.3:a:gnu:binutils:2.14a
-
cpe:2.3:a:gnu:binutils:2.15
-
cpe:2.3:a:gnu:binutils:2.15a
-
cpe:2.3:a:gnu:binutils:2.16.1
-
cpe:2.3:a:gnu:binutils:2.16.1a
-
cpe:2.3:a:gnu:binutils:2.17
-
cpe:2.3:a:gnu:binutils:2.17a
-
cpe:2.3:a:gnu:binutils:2.18
-
cpe:2.3:a:gnu:binutils:2.18a
-
cpe:2.3:a:gnu:binutils:2.19
-
cpe:2.3:a:gnu:binutils:2.19.1
-
cpe:2.3:a:gnu:binutils:2.19.1a
-
cpe:2.3:a:gnu:binutils:2.20
-
cpe:2.3:a:gnu:binutils:2.20.1
-
cpe:2.3:a:gnu:binutils:2.20.1a
-
cpe:2.3:a:gnu:binutils:2.21.1
-
cpe:2.3:a:gnu:binutils:2.21.1a
-
cpe:2.3:a:gnu:binutils:2.22
-
cpe:2.3:a:gnu:binutils:2.23
-
cpe:2.3:a:gnu:binutils:2.23.1
-
cpe:2.3:a:gnu:binutils:2.23.2
-
cpe:2.3:a:gnu:binutils:2.24
-
cpe:2.3:a:gnu:binutils:2.25
-
cpe:2.3:a:gnu:binutils:2.25.1
-
cpe:2.3:a:gnu:binutils:2.26
-
cpe:2.3:a:gnu:binutils:2.26.1
-
cpe:2.3:a:gnu:binutils:2.27
-
cpe:2.3:a:gnu:binutils:2.28
-
cpe:2.3:a:gnu:binutils:2.28.1
-
cpe:2.3:a:gnu:binutils:2.29
-
cpe:2.3:a:gnu:binutils:2.29.1
-
cpe:2.3:a:gnu:binutils:2.29.1.1
-
cpe:2.3:a:gnu:binutils:2.30
-
cpe:2.3:a:gnu:binutils:2.31
-
cpe:2.3:a:gnu:binutils:2.31.1
-
cpe:2.3:a:gnu:binutils:2.32
-
cpe:2.3:a:gnu:binutils:2.33
-
cpe:2.3:a:gnu:binutils:2.33.1
-
cpe:2.3:a:gnu:binutils:2.6
-
cpe:2.3:a:gnu:binutils:2.7
-
cpe:2.3:a:gnu:binutils:2.8
-
cpe:2.3:a:gnu:binutils:2.8.1
-
cpe:2.3:a:gnu:binutils:2.9
-
cpe:2.3:a:gnu:binutils:2.9.1
-
cpe:2.3:a:netapp:cloud_backup:-
-
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-
-
cpe:2.3:a:netapp:solidfire
-
cpe:2.3:a:netapp:solidfire_&_hci_management_node:-
-
cpe:2.3:h:netapp:hci_compute_node:-
-
cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-
-
cpe:2.3:o:fedoraproject:fedora:32
-
cpe:2.3:o:netapp:hci_compute_node_firmware:-