Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2020-35493 Details
Description
A flaw exists in binutils in bfd/pef.c. An attacker who is able to submit a crafted PEF file to be parsed by objdump could cause a heap buffer overflow -> out-of-bounds read that could lead to an impact to application availability. This flaw affects binutils versions prior to 2.34.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=1911437 | CVE | ExploitIssue TrackingPatchThird Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/ | CVE | |
| https://security.gentoo.org/glsa/202107-24 | CVE | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210212-0007/ | CVE | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=1911437 | [email protected] | ExploitIssue TrackingPatchThird Party Advisory |
| https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/ | [email protected] | |
| https://security.gentoo.org/glsa/202107-24 | [email protected] | Third Party Advisory |
| https://security.netapp.com/advisory/ntap-20210212-0007/ | [email protected] | Third Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-20 | Improper Input Validation | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| gnu binutils | < 2.34 |
CPE
Remediation
| |
| fedoraproject fedora | 32 |
CPE
Remediation
| |
| netapp cloud backup | All versions |
CPE
Remediation
| |
| netapp ontap select deploy administration utility | All versions |
CPE
Remediation
| |
| netapp solidfire, enterprise sds & hci storage node | All versions |
CPE
Remediation
| |
| netapp solidfire & hci management node | All versions |
CPE
Remediation
| |
| broadcom brocade fabric operating system firmware | All versions |
CPE
Remediation
| |
| netapp hci compute node firmware | All versions |
CPE
Remediation
| |
| netapp hci compute node | All versions |
CPE
Remediation
| |
Change History
10 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Sep 2, 2022 | Modified Analysis | [email protected] |
| Jul 10, 2021 | CVE Modified | [email protected] |
| Feb 17, 2021 | Modified Analysis | [email protected] |
| Feb 12, 2021 | CVE Modified | [email protected] |
| Jan 7, 2021 | CVE Modified | [email protected] |
| Jan 6, 2021 | Initial Analysis | [email protected] |