CVE Feed

    Dashboard / CVE / CVE-2020-35507

    CVE-2020-35507

    There's a flaw in bfd_pef_parse_function_stubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.

    Published:Dec 22, 2019
    Last Modified:Nov 21, 2024
    EPS:Jan 4, 2021
    EPSS Score:0.00082
    CVSS Score:5.5

    Affected Products

    Vendor
    Broadcom
    Product
    Brocade Fabric Operating System
    Vendor
    Gnu
    Product
    Binutils
    Vendor
    Netapp
    Product
    Cloud Backup
    Vendor
    Netapp
    Product
    Hci Compute Node
    Vendor
    Netapp
    Product
    Hci Compute Node Firmware
    Vendor
    Netapp
    Product
    Ontap Select Deploy Administration Utility
    Vendor
    Netapp
    Product
    Solidfire\, Enterprise Sds \& Hci Storage Node
    Vendor
    Netapp
    Product
    Solidfire \& Hci Management Node
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://bugzilla.redhat.com/show_bug.cgi?id=1911691https://bugzilla.redhat.com/show_bug.cgi?id=1911691

    Common Weakness Enumeration

    CWE-476 NULL Pointer Dereference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-31926 (CVSS 7.1) — System files could be overwritten using the less command in Brocade Fabric OS before Brocade Fabric OS v9.1.1c…
    CVE-2023-31927 (CVSS 5.3) — An information disclosure in the web interface of Brocade Fabric OS versions before Brocade Fabric OS v9.2.0 a…
    CVE-2023-31432 (CVSS 7.8) — Through manipulation of passwords or other variables, using commands such as portcfgupload, configupload, lice…
    CVE-2023-31928 (CVSS 6.3) — A reflected cross-site scripting (XSS) vulnerability exists in Brocade Webtools PortSetting.html of Brocade F…
    CVE-2023-31428 (CVSS 5.5) — Brocade Fabric OS before Brocade Fabric OS v9.1.1c, v9.2.0 contains a vulnerability in the command line that c…
    CVE-2023-31430 (CVSS 5.5) — A buffer overflow vulnerability in “secpolicydelete” command in Brocade Fabric OS before Brocade Fabric OS v9.…
    CVE-2023-31431 (CVSS 5.5) — A buffer overflow vulnerability in “diagstatus” command in Brocade Fabric OS before Brocade Fabric v9.2.0 and …
    CVE-2021-23133 (CVSS 6.7) — A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege…
    CVE-2020-12243 (CVSS 7.5) — In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result…
    CVE-2020-1927 (CVSS 6.1) — In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-ref…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High