CVE-2020-35494

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

Score

CVSS 3.1 6.1 Medium

Status

Modified - secalert@redhat.com

Published

2021-01-04

Last modified

2026-10-08

Weaknesses

CWE-908

Affected products

• Brocade Fabric Operating System Firmware (Broadcom)
• Fedora (Fedoraproject)
• Binutils (Gnu)
• Cloud Backup (Netapp)
• Hci Compute Node Firmware (Netapp)
• Ontap Select Deploy Administration Utility (Netapp)
• Solidfire, Enterprise Sds & Hci Storage Node (Netapp)
• Solidfire & Hci Management Node (Netapp)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1911439
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFW…
• https://security.netapp.com/advisory/ntap-20210212-0007/
• https://security.gentoo.org/glsa/202107-24