CVE-2022-35205: Medium severity GNU binutils vulnerability
Published Aug 22, 2023
·Updated
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function displaydebugnames allows attackers to cause a denial of service.
Affected Software
5 affected componentsFixes available
GNU binutils=2.38.50
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils
2.40-22.44-32.47.50.20261021-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2Fixed in 2.44-3Fixed in 2.47.50.20261021-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.38.50.20220627-1
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·07:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue with Binutils readelf?
The vulnerability ID for this issue is CVE-2022-35205.
2
What is the severity rating of CVE-2022-35205?
CVE-2022-35205 has a severity rating of medium.
3
What software version is affected by CVE-2022-35205?
CVE-2022-35205 affects Binutils readelf version 2.38.50.
4
How can attackers exploit CVE-2022-35205?
Attackers can exploit CVE-2022-35205 to cause a denial of service.
5
Is there a fix available for CVE-2022-35205?
Yes, a fix for CVE-2022-35205 may be available. Please refer to the official reference for more information.