CVE-2020-35448 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	No
Type	Information disclosure
Description	An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c. The issue is fixed in binutils 2.36.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1385	binutils	2.35.1-1	2.36-1	Medium	Fixed

References
https://sourceware.org/bugzilla/show_bug.cgi?id=26574 https://sourceware.org/bugzilla/attachment.cgi?id=12815 https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=8642dafaef21aa6747cec01df1977e9c52eb4679

References

https://sourceware.org/bugzilla/show_bug.cgi?id=26574
https://sourceware.org/bugzilla/attachment.cgi?id=12815
https://sourceware.org/git/?p=binutils-gdb.git;a=commitdiff;h=8642dafaef21aa6747cec01df1977e9c52eb4679