CVE-2020-35448

Katalog CVE

CVSS 3.3 · Low EPSS 1,2%

Kerentanan Out-of-bounds Read pada gnu binutils, netapp ontap select deploy administration utility. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.

Rincian

Terbit di NVD

27 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 68,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.gentoo.org/glsa/202107-24 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20210129-0008/ advisory pihak ketiga
• https://sourceware.org/bugzilla/show_bug.cgi?id=26574 exploit · issue tracking · advisory pihak ketiga
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8642dafaef21aa6747cec01df1977e9c52eb4679