CVE-2020-16593

Name of the Vulnerable Software and Affected Versions GNU Binutils versions 2.34 through 2.35

Description A Null Pointer Dereference issue exists in the Binary File Descriptor (BFD) library, which can cause a denial of service via a crafted file. The issue is demonstrated in the addr2line tool, specifically in the scan unit for symbols function. This can allow an attacker to cause a service disruption.

Recommendations For GNU Binutils version 2.34, consider disabling the scan unit for symbols function in the BFD library as a temporary workaround until a patch is available. For GNU Binutils version 2.35, consider disabling the scan unit for symbols function in the BFD library as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.