Wind River Support Network

HomeDefectsLIN1021-6353

Fixed

LIN1021-6353 : Security Advisory - binutils - CVE-2020-35342

Created: Aug 23, 2023 Updated: Mar 21, 2024

Resolved Date: Mar 21, 2024

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Toolchain

Description

GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4x_print_cond (file opcodes/tic4x-dis.c) which could allow attackers to make an information leak.

CREATE(Triage):(User=admin) CVE-2020-35342 (https://nvd.nist.gov/vuln/detail/CVE-2020-35342)