5.5
CVE-2020-35496
- EPSS 0.05%
- Published 04.01.2021 15:15:14
- Last modified 21.11.2024 05:27:25
- Source secalert@redhat.com
- Teams watchlist Login
- Open Login
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version32
Netapp ≫ Cloud Backup Version-
Netapp ≫ Ontap Select Deploy Administration Utility Version-
Netapp ≫ Solidfire & Hci Management Node Version-
Broadcom ≫ Brocade Fabric Operating System Firmware Version-
Netapp ≫ Hci Compute Node Firmware Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.161 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-476 NULL Pointer Dereference
The product dereferences a pointer that it expects to be valid but is NULL.