cve/2020/CVE-2020-16599.md

CVE-2020-16599

Description

A Null Pointer Dereference vulnerability exists in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35, in _bfd_elf_get_symbol_version_string, as demonstrated in nm-new, that can cause a denial of service via a crafted file.

POC

Reference

• https://sourceware.org/bugzilla/show_bug.cgi?id=25842
• https://sourceware.org/bugzilla/show_bug.cgi?id=25842

Github

• https://github.com/fokypoky/places-list