Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-27	CVE-2022-4285	An illegal memory access flaw was found in the binutils package. local low complexity gnu fedoraproject redhat	5.5
2022-08-26	CVE-2022-38533	Out-of-bounds Write vulnerability in multiple products In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfd_getl32 when called from the strip_main function in strip-new via a crafted file. local low complexity gnu fedoraproject CWE-787	5.5
2021-03-26	CVE-2021-20284	A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. local low complexity gnu netapp	5.5
2021-03-26	CVE-2021-20197	There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. local high complexity gnu redhat netapp broadcom	6.3
2021-01-04	CVE-2020-35507	There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. local low complexity gnu redhat netapp broadcom	5.5
2021-01-04	CVE-2020-35496	There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. local low complexity gnu fedoraproject netapp broadcom	5.5
2021-01-04	CVE-2020-35495	There's a flaw in binutils /bfd/pef.c. local low complexity gnu fedoraproject netapp broadcom	5.5
2021-01-04	CVE-2020-35494	There's a flaw in binutils /opcodes/tic4x-dis.c. local low complexity gnu fedoraproject netapp broadcom	6.1
2021-01-04	CVE-2020-35493	A flaw exists in binutils in bfd/pef.c. local low complexity gnu fedoraproject netapp broadcom	5.5
2020-12-09	CVE-2020-16599	NULL Pointer Dereference vulnerability in multiple products A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file. local low complexity gnu netapp CWE-476	5.5