binutils: Fix of CVE-2020-19726

2023-10-1020:51:11

repo.cloudlinux.com

binutils

illegal memory access

fix

cve-2020-19726

bfd library

pe format

unix

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

45.2%

JSON

CVE-2020-19726: Fix an illegal memory access in the BFD library which can be
triggered by attempting to parse a corrupt PE format file

OSVersionArchitecturePackageVersionFilename
Centos6x86_64binutils< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm
Centos6i686binutils-devel< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm
Centos6x86_64binutils-devel< 2.20.51.0.2binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm

OS	Version	Architecture	Package	Version	Filename
Centos	6	x86_64	binutils	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm
Centos	6	i686	binutils-devel	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm
Centos	6	x86_64	binutils-devel	< 2.20.51.0.2	binutils-2.20.51.0.2-5.48.1.el6.tuxcare.els7.src.rpm