CVE catalog

CVE-2020-16590

binutils: CVE-2020-16590

[CVE catalog]

Severity
Medium · CVSS 4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published
Source
[NVD] · [CVE record]
EPSS
0.95% · Oct 25, 2026

A double free vulnerability exists in the Binary File Descriptor (BFD) (aka libbrd) in GNU Binutils 2.35 in the process_symbol_table, as demonstrated in readelf, via a crafted file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianbinutilssid2.47.50.20261021-1fixed
Debianbinutilsforky2.47.50.20261021-1fixed
Debianbinutilstrixie2.44-3fixed
Debianbinutilsbookworm2.40-2fixed
Susebinutilslinux enterprise module for basesystem 15 sp22.37-7.21.2fixed
Susebinutilslinux enterprise module for basesystem 15 sp32.37-7.21.2fixed
Susebinutilslinux enterprise module for development tools 15 sp22.37-7.21.2fixed
Susebinutilslinux enterprise module for development tools 15 sp32.37-7.21.2fixed
Susebpftracelinux enterprise module for development tools 15 sp30.11.4-3.2.1fixed
Susebinutilslinux enterprise module for package hub 15 sp22.37-7.21.2fixed
Susebinutilslinux enterprise module for package hub 15 sp32.37-7.21.2fixed
Susebinutilslinux enterprise high performance computing 15 sp1-espos2.37-7.21.2fixed
Susebinutilslinux enterprise high performance computing 15 sp1-ltss2.37-7.21.2fixed
Susebinutilslinux enterprise server 15 sp1-bcl2.37-7.21.2fixed
Susebinutilslinux enterprise server 15 sp1-ltss2.37-7.21.2fixed
Susebinutilslinux enterprise server for sap applications 15 sp12.37-7.21.2fixed
Susebinutilsenterprise storage 62.37-7.21.2fixed
Opensusebinutilsleap 15.32.37-7.21.2fixed
Opensusebpftraceleap 15.30.11.4-3.2.1fixed
Opensusecross-aarch64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-arm-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-avr-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-epiphany-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-hppa-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-hppa64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-i386-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-ia64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-m68k-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-mips-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-ppc-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-ppc64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-ppc64le-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-riscv64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-rx-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-s390-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-s390x-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-sparc-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-sparc64-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-spu-binutilsleap 15.32.37-7.21.1fixed
Opensusecross-x86_64-binutilsleap 15.32.37-7.21.1fixed
Susebinutilslinux enterprise high performance computing 15-espos2.37-6.23.1fixed
Susebinutilslinux enterprise high performance computing 15-ltss2.37-6.23.1fixed
Susebinutilslinux enterprise server 15-ltss2.37-6.23.1fixed
Susebinutilslinux enterprise server for sap applications 152.37-6.23.1fixed
Opensusebinutilsleap 15.22.37-lp152.4.9.1fixed
Opensusebpftraceleap 15.20.11.4-lp152.2.7.1fixed
Opensusecross-aarch64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-arm-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-avr-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-epiphany-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-hppa-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-hppa64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-i386-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-ia64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-m68k-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-mips-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-ppc-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-ppc64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-ppc64le-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-riscv64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-rx-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-s390-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-s390x-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-sparc-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-sparc64-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-spu-binutilsleap 15.22.37-lp152.4.9.1fixed
Opensusecross-xtensa-binutilsleap 15.22.37-lp152.4.9.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianbinutilssourcesid2.35-1unimportantNot reportedNot reported
Debianbinutilssourceforky2.35-1unimportantNot reportedNot reported
Debianbinutilssourcetrixie2.35-1unimportantNot reportedNot reported
Debianbinutilssourcebookworm2.35-1unimportantNot reportedNot reported
Susebinutilsrpmlinux enterprise module for basesystem 15 sp22.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise module for basesystem 15 sp32.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise module for development tools 15 sp22.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise module for development tools 15 sp32.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebpftracerpmlinux enterprise module for development tools 15 sp30.11.4-3.2.1Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise module for package hub 15 sp22.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise module for package hub 15 sp32.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise high performance computing 15 sp1-espos2.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise high performance computing 15 sp1-ltss2.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise server 15 sp1-bcl2.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise server 15 sp1-ltss2.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise server for sap applications 15 sp12.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmenterprise storage 62.37-7.21.2Not reportedSUSE-SU-2021:3616-1Not reported
Opensusebinutilsrpmleap 15.32.37-7.21.2Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusebpftracerpmleap 15.30.11.4-3.2.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-aarch64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-arm-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-avr-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-epiphany-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-hppa-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-hppa64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-i386-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-ia64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-m68k-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-mips-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-ppc-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-ppc64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-ppc64le-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-riscv64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-rx-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-s390-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-s390x-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-sparc-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-sparc64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-spu-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Opensusecross-x86_64-binutilsrpmleap 15.32.37-7.21.1Not reportedOPENSUSE-SU-2021:3616-1Not reported
Susebinutilsrpmlinux enterprise high performance computing 15-espos2.37-6.23.1Not reportedSUSE-SU-2022:0934-1Not reported
Susebinutilsrpmlinux enterprise high performance computing 15-ltss2.37-6.23.1Not reportedSUSE-SU-2022:0934-1Not reported
Susebinutilsrpmlinux enterprise server 15-ltss2.37-6.23.1Not reportedSUSE-SU-2022:0934-1Not reported
Susebinutilsrpmlinux enterprise server for sap applications 152.37-6.23.1Not reportedSUSE-SU-2022:0934-1Not reported
Opensusebinutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusebpftracerpmleap 15.20.11.4-lp152.2.7.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-aarch64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-arm-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-avr-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-epiphany-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-hppa-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-hppa64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-i386-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-ia64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-m68k-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-mips-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-ppc-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-ppc64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-ppc64le-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-riscv64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-rx-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-s390-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-s390x-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-sparc-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-sparc64-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-spu-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported
Opensusecross-xtensa-binutilsrpmleap 15.22.37-lp152.4.9.1Not reportedOPENSUSE-SU-2021:1475-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [binutils]Fixed
    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-aarch64-linux-gnu]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-aarch64-linux-gnu-dbg]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-alpha-linux-gnu]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-alpha-linux-gnu-dbg]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arc-linux-gnu]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arc-linux-gnu-dbg]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arm-linux-gnueabi]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arm-linux-gnueabi-dbg]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arm-linux-gnueabihf]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-arm-linux-gnueabihf-dbg]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-common]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-dev]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-doc]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-for-build]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · all · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-for-host]Fixed

    Source package: [binutils]

    Details (2)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

    • 2.40-2 · arm64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-hppa64-linux-gnu]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-hppa64-linux-gnu-dbg]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-hppa-linux-gnu]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

  • [binutils-hppa-linux-gnu-dbg]Fixed

    Source package: [binutils]

    Details (1)

    • 2.40-2 · amd64 · bookworm

      Fixed · Fixed: 2.35-1

      dsa · binutils · debian · bookworm; dsa · binutils · debian · 12

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]