CVE-2020-16592
A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-...
Original description
The description as published by the source.
A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2020-16592 binutils Fixed in: 2.35-1
References
- advisory security.netapp.com
- report sourceware.org
- web lists.fedoraproject.org
- web lists.fedoraproject.org
- web sourceware.org