vulnerability
Amazon Linux AMI 2: CVE-2020-35448: Security patch for gcc10-binutils (Multiple Advisories)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:P/I:N/A:N) | Dec 27, 2020 | Sep 16, 2021 | May 20, 2026 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Published
Dec 27, 2020
Added
Sep 16, 2021
Modified
May 20, 2026
Description
An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.35.1. A heap-based buffer over-read can occur in bfd_getl_signed_32 in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section in elf.c.
Solutions
amazon-linux-ami-2-upgrade-gcc10-binutilsamazon-linux-ami-2-upgrade-gcc10-binutils-debuginfoamazon-linux-ami-2-upgrade-gcc10-binutils-develamazon-linux-ami-2-upgrade-gcc10-binutils-gold
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.