CVE-2020-21490

2023-08-2219:16:13

Google

osv.dev

gnu binutils

memory leak

microblaze-dis.c

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.4%

JSON

An issue was discovered in GNU Binutils 2.34. It is a memory leak when process microblaze-dis.c. This one will consume memory on each insn disassembled.

CPENameOperatorVersion
binutilseq2.33.50.20200111-1
binutilseq2.36.1-5
binutilseq2.41.50.20231202-1
binutilseq2.33.90.20200122-1
binutilseq2.38.50.20220615-3
binutilseq2.40.50.20230602-1
binutilseq2.33-1
binutilseq2.38.50.20220609-1
binutilseq2.33.1-4
binutilseq2.38.90.20220713-1

Name	Operator	Version
binutils	eq	2.33.50.20200111-1
binutils	eq	2.36.1-5
binutils	eq	2.41.50.20231202-1
binutils	eq	2.33.90.20200122-1
binutils	eq	2.38.50.20220615-3
binutils	eq	2.40.50.20230602-1
binutils	eq	2.33-1
binutils	eq	2.38.50.20220609-1
binutils	eq	2.33.1-4
binutils	eq	2.38.90.20220713-1