6.1

CVE-2020-35494

Exploit

There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.

Data is provided by the National Vulnerability Database (NVD)
Gnu ≫ Binutils Version < 2.34
Fedoraproject ≫ Fedora Version32
Netapp ≫ Cloud Backup Version-
Netapp ≫ Hci Compute Node Firmware Version-
   Netapp ≫ Hci Compute Node Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.21% 0.433
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.1 1.8 4.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:N/A:P
CWE-908 Use of Uninitialized Resource

The product uses or accesses a resource that has not been initialized.

https://bugzilla.redhat.com/show_bug.cgi?id=1911439
Patch
Third Party Advisory
Exploit
Issue Tracking