CVE-2022-4285

Summary

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

Affected Software

Weaknesses

• CWE-476: CWE-476

ADP Enrichment

CVE Program Container

Additional References

• https://sourceware.org/bugzilla/show_bug.cgi?id=29699
• https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
• https://security.gentoo.org/glsa/202309-15

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://sourceware.org/bugzilla/show_bug.cgi?id=29699
• https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
• https://security.gentoo.org/glsa/202309-15

• ←Previous
• Next→