A Denial of Service vulnerability exists in the Binary File Descriptor (BFD) in GNU Binutils 2.34 due to an invalid read in process_symbol_table, as demonstrated in readeif.
Created binutils tracking bugs for this issue:
Affects: fedora-32 [bug 1906773]
Created mingw-binutils tracking bugs for this issue:
Affects: fedora-all [bug 1906774]
binutils as shipped in Red Hat Developer Toolsets 9 and 10, Red Hat Enterprise Linux 8 BaseOS and GCC Toolsets 9 and 10, are all not affected by this flaw as it was introduced in a newer version of binutils code than shipped for BaseOS and the 9 toolsets, and already patched in the versions shipped with 10 toolsets.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):