CVE-2022-35206: Null Pointer Dereference
Published Aug 22, 2023
·Updated
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function readanddisplayattrvalue in file dwarf.c.
Affected Software
5 affected componentsFixes available
GNU binutils=2.38.50
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils
2.40-22.44-32.47.50.20261021-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2Fixed in 2.44-3Fixed in 2.47.50.20261021-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.38.50.20220627-1
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·07:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2022-35206?
CVE-2022-35206 is a null pointer dereference vulnerability in Binutils readelf 2.38.50.
2
How does CVE-2022-35206 affect GNU Binutils?
CVE-2022-35206 affects GNU Binutils version 2.38.50.
3
What is the severity of CVE-2022-35206?
The severity of CVE-2022-35206 is medium with a CVSS score of 5.5.
4
What is the CWE of CVE-2022-35206?
CVE-2022-35206 has a CWE (Common Weakness Enumeration) number of 476.
5
Is there a fix available for CVE-2022-35206?
There is currently no available fix for CVE-2022-35206. It is recommended to apply any official patches or updates provided by the vendor.