CVE-2019-1010204 is an Improper Input Validation, Signed/Unsigned Comparison, and Out-of-bounds Read vulnerability affecting GNU binutils gold versions 1.11-1.16 (binutils v2.21-v2.31.1), as well as various NetApp products. An attacker can trigger a denial of service by providing a specially crafted ELF file with an invalid e_shoff header field. This vulnerability has a CVSS score of 5.5 (Medium) and requires user interaction, as it involves opening a malicious file. There is currently no public exploit code available, no evidence of active exploitation, and minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 2.21, <= 2.31.1CPE matchmatch criteria | cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:* | ||
>= 1.11, <= 1.16CPE matchmatch criteria | cpe:2.3:a:gnu:binutils_gold:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.