PRIOn knowledge basePRION:CVE-2022-48063

HistoryAug 22, 2023 - 7:16 p.m.

Memory corruption

2023-08-2219:16:00

PRIOn knowledge base

www.prio-n.com

memory corruption

load separate debug files

excessive memory consumption

elf file

dns attack

nvd

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

CPENameOperatorVersion
binutilslt2.40

CPE	Name	Operator	Version
	binutils	lt	2.40

References

security.netapp.com/advisory/ntap-20231006-0008/

sourceware.org/bugzilla/show_bug.cgi?id=29924

sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=75393a2d54bcc40053e5262a3de9d70c5ebfbbfd