PT-2020-6909 · Gnu+2 · Gnu Binutils+2

Manh-Dung Nguyen

·

Published

2020-12-09

·

Updated

2024-06-15

·

CVE-2020-16591

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35
Description A Denial of Service issue exists in the Binary File Descriptor (BFD) due to an invalid read in the process symbol table function. This can allow an attacker to cause a denial of service.
Recommendations For GNU Binutils version 2.34, consider disabling the process symbol table function as a temporary workaround until a patch is available. For GNU Binutils version 2.35, consider disabling the process symbol table function as a temporary workaround until a patch is available.

Exploit

Fix

DoS

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2023-1178
BDU:2023-05792
CVE-2020-16591
OPENSUSE-SU-2021:1475-1
OPENSUSE-SU-2021:3616-1
OPENSUSE-SU-2021_1475-1
OPENSUSE-SU-2021_3616-1
OPENSUSE-SU-2024:10651-1
SUSE-SU-2021:3593-1
SUSE-SU-2021:3616-1
SUSE-SU-2022:0934-1

Affected Products

Alt Linux
Gnu Binutils
Suse