Veracode Vulnerability DatabaseVERACODE:43051Denial Of Service (DoS)
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
10.3%
binutils is vulnerable to Denial of Service (DoS) attacks. The vulnerability exists in the find_abstract_instance function in the dwarf2.c file. The function is responsible for finding the nearest line number for a given address in an ELF file. The vulnerability occurs when the function fails to properly free a memory buffer. This can cause the function to leak memory, which can eventually lead to a denial of service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| binutils:sid | eq | 2.35.1-3 | |
| binutils:sid | eq | 2.35.1-3 |
References
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
lists.fedoraproject.org/archives/list/[email protected]/message/GLZXZXFX2ZWTDU2QZUSZG36LZZVTKUVG/
lists.fedoraproject.org/archives/list/[email protected]/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
security-tracker.debian.org/tracker/CVE-2022-48065
security.netapp.com/advisory/ntap-20231006-0008/
sourceware.org/bugzilla/show_bug.cgi?id=29925
sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=d28fbc7197ba0e021a43f873eff90b05dcdcff6a
sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=d28fbc7197ba0e021a43f873eff90b05dcdcff6a
Related
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
10.3%