CVE-2020-16599
published 2020-12-09CVE-2020-16599: A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in…
medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Affected
23 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | binutils | < binutils 2.39.50.20221208-2 (bookworm) | binutils 2.39.50.20221208-2 (bookworm) |
| debian | binutils | < binutils 2.35-1 (bookworm) | binutils 2.35-1 (bookworm) |
| fedoraproject | fedora | — | — |
| gnu | binutils | — | — |
| gnu | binutils | — | — |
| gnu | binutils | >= 0 < 2.35-1 | 2.35-1 |
| gnu | binutils | >= 0 < 2.35-1 | 2.35-1 |
| gnu | binutils | >= 0 < 2.39.50.20221208-2 | 2.39.50.20221208-2 |
| gnu | binutils | >= 0 < 2.35-1 | 2.35-1 |
| gnu | binutils | >= 0 < 2.39.50.20221208-2 | 2.39.50.20221208-2 |
| gnu | binutils | >= 0 < 2.35-1 | 2.35-1 |
| gnu | binutils | >= 0 < 2.39.50.20221208-2 | 2.39.50.20221208-2 |
| gnu | binutils | >= 2.35 < 2.39-7 | 2.39-7 |
| gnu | gdb | >= 0 < 9.2-0ubuntu1~20.04.2 | 9.2-0ubuntu1~20.04.2 |
| gnu | gdb | >= 0 < 12.1-0ubuntu1~22.04.2 | 12.1-0ubuntu1~22.04.2 |
| gnu | gdb | >= 0 < 7.11.1-0ubuntu1~16.5+esm1 | 7.11.1-0ubuntu1~16.5+esm1 |
| gnu | gdb | >= 0 < 8.1.1-0ubuntu1+esm1 | 8.1.1-0ubuntu1+esm1 |
| msrc | cbl2_binutils_2.37-5_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_binutils_2.36.1-3_on_cbl_mariner_1.0 | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
| redhat | enterprise_linux | — | — |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM