CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 1CVE-2020-35448 – binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c
https://notcve.org/view.php?id=CVE-2020-35448
27 Dec 2020 — An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c. Se detectó un problema en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), distribuida en GNU Binutils versión 2.35.1. Una lectura excesiva de búfer en la región heap de la memoria puede ocurrir en... • https://security.gentoo.org/glsa/202107-24 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 5EXPL: 1CVE-2020-16599 – openSUSE Security Advisory - openSUSE-SU-2021:1475-1
https://notcve.org/view.php?id=CVE-2020-16599
09 Dec 2020 — A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file. Se presenta una vulnerabilidad de Desreferencia del Puntero Null en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), como se distribuye en GNU Binutils versión 2.35, en _bfd_elf_get_symbol_version_string, como es demostra... • https://security.netapp.com/advisory/ntap-20210122-0003 • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 1CVE-2020-16593 – openSUSE Security Advisory - openSUSE-SU-2021:1475-1
https://notcve.org/view.php?id=CVE-2020-16593
09 Dec 2020 — A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file. Se presenta una vulnerabilidad de Desreferencia del Puntero Null en la biblioteca Binary File Descriptor (BFD) (también se conoce como libbfd), como se distribuye en GNU Binutils versión 2.35, en scan_unit_for_symbols, como es demostrado en addr2line, que pu... • https://security.netapp.com/advisory/ntap-20210122-0003 • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-16591 – openSUSE Security Advisory - openSUSE-SU-2021:1475-1
https://notcve.org/view.php?id=CVE-2020-16591
09 Dec 2020 — A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif. Se presenta una vulnerabilidad de denegación de servicio en la Binary File Descriptor (BFD) en GNU Binutils versión 2.35, debido a una lectura no válida en process_symbol_table, como es demostrado en readeif An update that solves 13 vulnerabilities, contains four features and has one errata is now available. This update for binutils fix... • https://security.netapp.com/advisory/ntap-20210115-0003 • CWE-125: Out-of-bounds Read •
CVSS: 5.5EPSS: 0%CPEs: 2EXPL: 1CVE-2020-16590 – openSUSE Security Advisory - openSUSE-SU-2021:1475-1
https://notcve.org/view.php?id=CVE-2020-16590
09 Dec 2020 — A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file. Se presenta una vulnerabilidad de doble liberación en la Binary File Descriptor (BFD) (también se conoce como libbrd) en GNU Binutils versión 2.35 en process_symbol_table, como es demostrado en readelf, por medio de un archivo elaborado An update that solves 13 vulnerabilities, contains four features and has one errata is now av... • https://security.netapp.com/advisory/ntap-20210115-0003 • CWE-415: Double Free •