CVE-2020-35507: Null Pointer Dereference
GNU Binutils before 2.34 has a NULL pointer dereference in bfdpefparsefunctionstubs function in bfd/pef.c due to not checking return value of bfdmalloc. This bug allows attackers to cause a denial of service.
Reference: https://sourceware.org/bugzilla/showbug.cgi?id=25308
Other sources
GNU Binutils is vulnerable to a denial of service, caused by NULL pointer dereference in the bfdpefparsefunctionstubs of bfd/pef.c in the Binary File Descriptor (BFD) library. By persuading a victim to open a specially-crafted file with corrupt dwarf1 debug information, a remote attacker could cause a denial of service.
— IBM
There's a flaw in bfdpefparsefunctionstubs of bfd/pef.c in binutils in versions prior to 2.34 which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability.
— MITRE
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2020-35507?
CVE-2020-35507 is a vulnerability in the bfd_pef_parse_function_stubs function of the binutils package in versions prior to 2.34.
What is the severity of CVE-2020-35507?
The severity of CVE-2020-35507 is medium, with a severity value of 5.5.
What software is affected by CVE-2020-35507?
The binutils package versions prior to 2.34 are affected, as well as Redhat Enterprise Linux 8.0, GNU Binutils, Netapp HCI Compute Node Firmware, Netapp Cloud Backup, NetApp ONTAP Select Deploy administration utility, Netapp Solidfire, Enterprise Sds & Hci Storage Node, and Broadcom Brocade Fabric Operating System.
How can an attacker exploit CVE-2020-35507?
An attacker can exploit CVE-2020-35507 by submitting a crafted file to be processed by objdump, which can cause a NULL pointer dereference.
Is there a fix available for CVE-2020-35507?
Yes, the vulnerability can be fixed by updating the binutils package to version 2.34 or newer.