CVE-2020-35448

Name
CVE-2020-35448
Description
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
NVD Severity
low
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Patch https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8642dafaef21aa6747cec01df1977e9c52eb4679
Exploit https://sourceware.org/bugzilla/show_bug.cgi?id=26574
Third Party Advisory https://security.netapp.com/advisory/ntap-20210129-0008/
GENTOO https://security.gentoo.org/glsa/202107-24

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:gnu:binutils:2.35.1:*:*:*:*:*:*:* binutils == None == 2.35.1

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
mingw-w64-binutils edge-community 2.36-r0 None fixed
mingw-w64-binutils 3.22-community 2.36-r0 None fixed
mingw-w64-binutils 3.21-community 2.36-r0 None fixed
mingw-w64-binutils 3.20-community 2.36-r0 None fixed
mingw-w64-binutils 3.19-community 2.36-r0 None fixed
mingw-w64-binutils 3.18-community 2.36-r0 None fixed
mingw-w64-binutils 3.17-community 2.36-r0 None fixed
binutils-cross-embedded edge-community 2.37-r0 Marian Buschsieweke <marian.buschsieweke@ovgu.de> fixed
binutils-cross-embedded 3.22-community 2.37-r0 None fixed
binutils-cross-embedded 3.21-community 2.37-r0 None fixed
binutils-cross-embedded 3.20-community 2.37-r0 None fixed
binutils-cross-embedded 3.19-community 2.37-r0 None fixed
binutils-cross-embedded 3.18-community 2.37-r0 None fixed
binutils-cross-embedded 3.17-community 2.37-r0 None fixed