CVE-2020-35495

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2021-01-04

Last modified

2026-10-08

Weaknesses

CWE-476

Affected products

• Brocade Fabric Operating System Firmware (Broadcom)
• Fedora (Fedoraproject)
• Binutils (Gnu)
• Cloud Backup (Netapp)
• Hci Compute Node Firmware (Netapp)
• Ontap Select Deploy Administration Utility (Netapp)
• Solidfire, Enterprise Sds & Hci Storage Node (Netapp)
• Solidfire & Hci Management Node (Netapp)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1911441
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFW…
• https://security.netapp.com/advisory/ntap-20210212-0007/
• https://security.gentoo.org/glsa/202107-24