medium5.5
CVE-2022-4285
An illegal memory access flaw was found in the binutils package.
Impact
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gnu | Binutils | from 2.35 before 2.39-7 |
| Fedoraproject | Fedora | Version 37 |
| Redhat | Enterprise Linux | Versions 6.0, 7.0, 8.0, 9.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2150768
- https://security.gentoo.org/glsa/202309-15
- https://sourceware.org/bugzilla/show_bug.cgi?id=29699
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
- https://bugzilla.redhat.com/show_bug.cgi?id=2150768
- https://security.gentoo.org/glsa/202309-15
- https://sourceware.org/bugzilla/show_bug.cgi?id=29699
- https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70