PT-2020-6940 · Gnu+2 · Gnu Nm+2

Heqing Huang · Published 2020-10-01 · Updated 2023-09-18 · CVE-2020-19724

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GNU nm versions prior to 2.34

Description The issue is related to a memory consumption problem in the get data function in binutils/nm.c. This allows attackers to cause a denial of service via crafted commands. The vulnerability is associated with incorrect memory deallocation before removing the last reference, which can be exploited to disrupt service.

Recommendations For versions prior to 2.34, update to version 2.34 or later to resolve the issue. As a temporary workaround, consider restricting the use of the get data function in binutils/nm.c to minimize the risk of exploitation.

Exploit

Fix

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2023-07814

CVE-2020-19724

USN-6381-1

Affected Products

Astra Linux

Gnu Nm

Ubuntu

References · 24

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=25362 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-19724 · Security Note
• https://ubuntu.com/security/CVE-2020-19724 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-35342 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-45703 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-07814 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-19724 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-19726 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-19724 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-19724 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-19724 · Security Note
• https://osv.dev/vulnerability/USN-6381-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47695 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-46174 · Vendor Advisory