Lucene search
Ubuntu.comUB:CVE-2022-48064HistoryAug 22, 2023 - 12:00 a.m.
CVE-2022-48064
2023-08-2200:00:00
ubuntu.com
ubuntu.com
11
cve-2022-48064; elf file; dns attack; memory consumption; security issue; nm inspection tool; memory leak; gnu binutils v2.40; excessive.
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.2%
GNU Binutils before 2.40 was discovered to contain an excessive memory
consumption vulnerability via the function
bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could
supply a crafted ELF file and cause a DNS attack.
Bugs
Notes
| Author | Note |
|---|---|
| seth-arnold | binutils isn’t safe for untrusted inputs. |
| ccdm94 | upstream does not consider this a security issue, as per their binutils/SECURITY.txt security file. That is because this issue affects nm, an inspection tool. For bionic and earlier, the patch seems to introduce a memory leak, so these releases will be marked as ignored. |
Related
openvas
openvas
Fedora: Security Advisory for gdb (FEDORA-2023-d94be55511)
2023-10-01 00:00:00
Fedora: Security Advisory for gdb (FEDORA-2023-8d0913f986)
2023-10-16 00:00:00
Huawei EulerOS: Security Advisory for gdb (EulerOS-SA-2024-1266)
2024-03-12 00:00:00
redhatcve
redhatcve
CVE-2022-48064
2023-08-23 20:15:33
fedora
fedora
[SECURITY] Fedora 37 Update: gdb-13.2-3.fc37
2023-10-13 01:33:49
[SECURITY] Fedora 38 Update: gdb-13.2-5.fc38
2023-09-29 01:28:38
[SECURITY] Fedora 39 Update: gdb-13.2-10.fc39
2023-11-03 18:57:37
cve
cve
CVE-2022-48064
2023-08-22 19:16:30
prion
prion
Memory corruption
2023-08-22 19:16:00
nvd
nvd
CVE-2022-48064
2023-08-22 19:16:30
nessus
nessus
Fedora 37 : gdb (2023-8d0913f986)
2023-10-12 00:00:00
Fedora 38 : gdb (2023-d94be55511)
2023-09-29 00:00:00
EulerOS 2.0 SP8 : gdb (EulerOS-SA-2024-1266)
2024-03-12 00:00:00
cvelist
cvelist
CVE-2022-48064
2023-08-22 00:00:00
veracode
veracode
Denial Of Service (DoS)
2023-08-31 20:29:18
debiancve
debiancve
CVE-2022-48064
2023-08-22 19:16:30
osv
osv
CVE-2022-48064
2023-08-22 19:16:30
alpinelinux
alpinelinux
CVE-2022-48064
2023-08-22 19:16:30
photon
photon
Moderate Photon OS Security Update - PHSA-2023-3.0-0655
2023-09-26 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0096
2023-09-20 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0478
2023-09-25 00:00:00
redos
redos
ROS-20231013-05
2023-10-13 00:00:00
amazon
amazon
Medium: binutils
2024-01-03 21:04:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0005 Low
EPSS
Percentile
17.2%
Related for UB:CVE-2022-48064