CVE-2020-16591

Опубликовано: 09 дек. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Низкий

Описание

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

Ссылки

https://security.netapp.com/advisory/ntap-20210115-0003/
Technical Description
https://sourceware.org/bugzilla/show_bug.cgi?id=25822
Exploit
Issue Tracking
Patch
Third Party Advisory
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=001890e1f9269697f7e0212430a51479271bdab2
https://security.netapp.com/advisory/ntap-20210115-0003/
Technical Description
https://sourceware.org/bugzilla/show_bug.cgi?id=25822
Exploit
Issue Tracking
Patch
Third Party Advisory
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=001890e1f9269697f7e0212430a51479271bdab2

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gnu:binutils:2.35:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00393

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2020-16591

CVSS3: 5.5

ubuntu

около 5 лет назад

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

CVE-2020-16591

CVSS3: 5.5

redhat

около 5 лет назад

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.35 due to an invalid read in process_symbol_table, as demonstrated in readeif.

CVE-2020-16591

CVSS3: 5.5

debian

около 5 лет назад

A Denial of Service vulnerability exists in the Binary File Descriptor ...

GHSA-grmj-8wvf-p5xh

CVSS3: 5.5

github

больше 3 лет назад

A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.34 due to an invalid read in process_symbol_table, as demonstrated in readeif.

BDU:2023-05792

CVSS3: 5.5

fstec

около 5 лет назад

Уязвимость функции process_symbol_table программного средства разработки GNU Binutils, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 60%

0.00393

Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-125