Wiz
Vulnerability DatabaseCVE-2021-35495

CVE-2021-35495: 
TIBCO JasperReports Server vulnerability analysis and mitigation

Overview

A vulnerability exists in GNU binutils versions prior to 2.34, specifically in the /bfd/pef.c file. The vulnerability is tracked as CVE-2020-35495 and was discovered in December 2020 (NVD).

Technical details

The vulnerability is a NULL pointer dereference flaw that occurs when processing crafted input files with the objdump program. It has been assigned a CVSS v3.1 base score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is classified as CWE-476 (NULL Pointer Dereference) (NVD).

Impact

The primary impact of this vulnerability is on application availability. When successfully exploited, it can cause the objdump program to crash, leading to a denial of service condition. The vulnerability does not affect confidentiality or integrity of the system (Red Hat Bugzilla).

Mitigation and workarounds

The vulnerability has been fixed in GNU binutils version 2.34 and later. Users are advised to upgrade to the latest version of binutils. Multiple vendors have released security advisories and patches, including Red Hat, Fedora, Gentoo, and NetApp (NetApp Advisory).

Additional resources

Source: This report was generated using AI

Related TIBCO JasperReports Server vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2024-3325HIGH8.6
  • TIBCO JasperReports ServerTIBCO JasperReports Server
  • cpe:2.3:a:tibco:jasperreports_server
NoYesJul 10, 2024
CVE-2022-41562HIGH8.4
  • TIBCO JasperReports ServerTIBCO JasperReports Server
  • cpe:2.3:a:tibco:jasperreports_server
NoYesDec 13, 2022
CVE-2024-3323HIGH8.3
  • TIBCO JasperReports ServerTIBCO JasperReports Server
  • cpe:2.3:a:tibco:jasperreports_server
NoYesApr 17, 2024
CVE-2022-41561HIGH7.2
  • TIBCO JasperReports ServerTIBCO JasperReports Server
  • cpe:2.3:a:tibco:jasperreports_server
NoYesDec 13, 2022
CVE-2022-41563MEDIUM5.4
  • TIBCO JasperReports ServerTIBCO JasperReports Server
  • cpe:2.3:a:tibco:jasperreports_server
NoYesDec 13, 2022

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo