CVE-2020-19724

A memory consumption issue in get_data function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command.
Configurations

Configuration 1 (hide)

cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:09

Type Values Removed Values Added
References () https://sourceware.org/bugzilla/show_bug.cgi?id=25362 - Exploit, Issue Tracking, Third Party Advisory () https://sourceware.org/bugzilla/show_bug.cgi?id=25362 - Exploit, Issue Tracking, Third Party Advisory
References () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a - () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a -

07 Nov 2023, 03:19

Type Values Removed Values Added
References
  • {'url': 'https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a', 'name': 'https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'MISC'}
  • () https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=805f38bc551de820bcd7b31d3c5731ae27cf853a -

25 Aug 2023, 02:45

Type Values Removed Values Added
First Time Gnu
Gnu binutils
CWE CWE-401
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CPE cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*
References (MISC) https://sourceware.org/bugzilla/show_bug.cgi?id=25362 - (MISC) https://sourceware.org/bugzilla/show_bug.cgi?id=25362 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a - (MISC) https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=805f38bc551de820bcd7b31d3c5731ae27cf853a - Mailing List, Third Party Advisory

22 Aug 2023, 20:10

Type Values Removed Values Added
New CVE

Information

Published : 2023-08-22 19:16

Updated : 2024-11-21 05:09


NVD link : CVE-2020-19724

Mitre link : CVE-2020-19724

CVE.ORG link : CVE-2020-19724


JSON object : View

Products Affected

gnu

  • binutils
CWE
CWE-401

Missing Release of Memory after Effective Lifetime