CVE-2020-35494
MEDIUMbinutils < 2.34 - Use of Uninitialized Resource in tic4x-dis.c
Title source: llmDescription
There's a flaw in binutils /opcodes/tic4x-dis.c. An attacker who is able to submit a crafted input file to be processed by binutils could cause usage of uninitialized memory. The highest threat is to application availability with a lower threat to data confidentiality. This flaw affects binutils versions prior to 2.34.
References (4)
Core 4
Core References
Exploit, Issue Tracking, Patch, Third Party Advisory x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=1911439
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4KOK3QWSVOUJWJ54HVGIFWNLWQ5ZY4S6/
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20210212-0007/
Third Party Advisory vendor-advisory
x_refsource_gentoo
https://security.gentoo.org/glsa/202107-24
Scores
CVSS v3
6.1
EPSS
0.0021
EPSS Percentile
42.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Details
CWE
CWE-908
Status
published
Products (8)
broadcom/brocade_fabric_operating_system_firmware
fedoraproject/fedora
32
gnu/binutils
< 2.34
netapp/cloud_backup
netapp/hci_compute_node_firmware
netapp/ontap_select_deploy_administration_utility
netapp/solidfire\,_enterprise_sds_\&_hci_storage_node
netapp/solidfire_\&_hci_management_node
Published
Jan 04, 2021
Tracked Since
Feb 18, 2026