CVE-2020-35496 vulnerability in GNU and Other Products
Published on January 4, 2021
There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.
Vulnerability Analysis
Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2020-35496
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2020-35496 are published in these products: