There's a flaw in bfd_pef_scan_start_address() of bfd/pef.c in binutils which could allow an attacker who is able to submit a crafted file to be processed by objdump to cause a NULL pointer dereference. The greatest threat of this flaw is to application availability. This flaw affects binutils versions prior to 2.34.

🗓️ 07 Jan 2021 08:00:00Reported by MicrosoftType

Binutils flaw in bfd_pef_scan_start_address() may trigger NULL dereference on crafted files by objdump prior to 2.34.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU Binutils affect IBM Netezza Performance Server	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics for NPS	31 May 202203:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in GNU binutils affect IBM Netezza Analytics	13 Jan 202115:48	–	ibm
AlpineLinux	CVE-2020-35496	4 Jan 202115:15	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в binutils	20 May 202605:53	–	astralinux
BDU FSTEC	The vulnerability of the bfd_pef_scan_start_address function in the bfd/pef.c component of the GNU Binutils development environment allows a attacker to cause a service failure.	14 Nov 202300:00	–	bdu_fstec
CBLMariner	CVE-2020-35496 affecting package binutils 2.32-5	29 Jan 202107:39	–	cbl_mariner
Circl	CVE-2020-35496	4 Jan 202119:10	–	circl
CNNVD	GNU Binutils 代码问题漏洞	4 Jan 202100:00	–	cnnvd
CNVD	GNU Binutils Null Pointer Dereference Vulnerability (CNVD-2021-01281)	5 Jan 202100:00	–	cnvd