PT-2020-14872 · Gnu+1 · Gnu Binutils+1

Published 2020-12-09 · Updated 2024-06-15 · CVE-2020-16598

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.34

Description A Null Pointer Dereference issue exists in the Binary File Descriptor (BFD) library, as distributed in GNU Binutils, in the debug get real type function, as demonstrated in objdump, that can cause a denial of service via a crafted file.

Recommendations For GNU Binutils version 2.34, consider avoiding the use of the debug get real type function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-16598

MGASA-2021-0011

OPENSUSE-SU-2021:1475-1

OPENSUSE-SU-2021:3616-1

OPENSUSE-SU-2021_1475-1

OPENSUSE-SU-2021_3616-1

OPENSUSE-SU-2024:10651-1

SUSE-SU-2021:3593-1

SUSE-SU-2021:3616-1

SUSE-SU-2022:0934-1

Affected Products

Gnu Binutils

Suse

References · 163

• https://osv.dev/vulnerability/SUSE-SU-2021:3616-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10651-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-16598 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2022:0934-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:3616-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:3593-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1475-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0011.html · Security Note
• https://osv.dev/vulnerability/MGASA-2021-0011 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/thread/DJIW6KKY2TSLD43XEZXG56WREIIBUIIQ · Vendor Advisory
• https://bugzilla.suse.com/1163744 · Note
• https://suse.com/security/cve/CVE-2017-9748 · Note
• https://suse.com/security/cve/CVE-2020-35496 · Note
• https://bugzilla.suse.com/1180461 · Note
• https://suse.com/security/cve/CVE-2017-14745 · Note