CVE-2020-16592: Use After Free
A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfdhashlookup, as demonstrated in nm-new, that can cause a denial of service via a crafted file.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-16592.
What is the title of this vulnerability?
The title of this vulnerability is 'A use after free issue exists in the Binary File Descriptor (BFD) library (aka libbfd) in GNU Binutils 2.34 in bfd_hash_lookup'.
What is the description of this vulnerability?
The description of this vulnerability is that a use after free issue exists in the BFD library in GNU Binutils 2.34, which can cause a denial of service via a crafted file.
What software is affected by this vulnerability?
The software affected by this vulnerability includes binutils version 2.30-21ubuntu1~18.04.7, binutils version 2.34-6ubuntu1.3, and binutils version 2.31.1-16.
How can I fix this vulnerability?
To fix this vulnerability, update the binutils package to versions 2.30-21ubuntu1~18.04.7, 2.34-6ubuntu1.3, 2.35.2-2, 2.40-2, or 2.41-5.