CVE-2020-21490

Exploit

EPSS 0.02%
Veröffentlicht 22.08.2023 19:16:13
Zuletzt bearbeitet 21.11.2024 05:12:37
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Gnu ≫ Binutils Version < 2.34

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.043

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE-401 Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

https://security.netapp.com/advisory/ntap-20230929-0007/

https://sourceware.org/bugzilla/show_bug.cgi?id=25249

Third Party Advisory

Exploit

Issue Tracking

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=378fd436405b3051df34ac995b2e03fe1f3d1907

https://nvd.nist.gov/vuln/detail/CVE-2020-21490

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-21490

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-21490

EUVD