Lucene search

K
cloudlinuxCloudLinuxCLSA-2023:1694536738
HistorySep 12, 2023 - 4:40 p.m.

binutils: Fix of 3 CVEs

2023-09-1216:40:09
repo.cloudlinux.com
15
binutils
fix
cves
out of bound reads
null pointer
segmentation fault
uninitialized field
dos
unix

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

21.8%

  • CVE-2022-47673: Fix multiple out of bound reads which may cause a DoS
  • CVE-2022-47695: Fix NULL pointer segmentation fault which may cause a DoS
  • CVE-2022-47696: Fix read of unitialized field which may cause a DoS

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

21.8%