CVE-2020-16593
MEDIUMGNU Binutils - NULL Pointer Dereference
Title source: ruleDescription
A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in scan_unit_for_symbols, as demonstrated in addr2line, that can cause a denial of service via a crafted file.
References (3)
Scores
CVSS v3
5.5
EPSS
0.0033
EPSS Percentile
55.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Classification
CWE
CWE-476
Status
published
Affected Products (4)
gnu/binutils
netapp/cloud_backup
netapp/ontap_select_deploy_administration_utility
netapp/solidfire_\&_hci_management_node
Timeline
Published
Dec 09, 2020
Tracked Since
Feb 18, 2026