CVE-2022-4285: Null Pointer Dereference
An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.
Other sources
Illegal memory access when parsing an ELF file containing corrupt symbol version information. Incomplete fix of CVE-2020-16599.
Upstream issue & fix: https://sourceware.org/bugzilla/showbug.cgi?id=29699 https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=5c831a3c7f3ca98d6aba1200353311e1a1f84c70
— Red Hat
Affected Software
Remediation
Patch Available
Patch Available
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2022-4285?
CVE-2022-4285 is an illegal memory access flaw found in the binutils package.
What is the severity of CVE-2022-4285?
The severity of CVE-2022-4285 is medium with a CVSS score of 5.5.
Which software is affected by CVE-2022-4285?
Software affected by CVE-2022-4285 includes Redhat Enterprise Linux 6.0, 7.0, 8.0, and 9.0, Fedora 37, GNU Binutils, gcc-toolset, devtoolset, and binutils version 2.39.
How can I fix CVE-2022-4285?
To fix CVE-2022-4285, update to the specified versions of the affected software provided in the respective vendor's advisory.
Where can I find more information about CVE-2022-4285?
You can find more information about CVE-2022-4285 on the CVE website, NIST NVD, Bugzilla, and Red Hat's advisory page.