Vulnerabilities > CVE-2020-35495 - NULL Pointer Dereference vulnerability in multiple products

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH

Summary

There's a flaw in binutils /bfd/pef.c. An attacker who is able to submit a crafted input file to be processed by the objdump program could cause a null pointer dereference. The greatest threat from this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

Vulnerable Configurations

Part Description Count
Application
Gnu
61
Application
Netapp
4
OS
Fedoraproject
1
OS
Broadcom
1
OS
Netapp
1
Hardware
Netapp
1

Common Weakness Enumeration (CWE)