CVE-2022-45703: Buffer Overflow
Heap buffer overflow vulnerability in binutils readelf before 2.40 via function displaydebugsection in file readelf.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2Fixed in 2.44-3Fixed in 2.47.50.20261021-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2 - Upgrade
Upgrade
binutils/readelfto a version that resolves this vulnerability.Fixed in 2.40
Event History
Frequently Asked Questions
What is CVE-2022-45703?
CVE-2022-45703 is a heap buffer overflow vulnerability in binutils readelf before version 2.40.
How does CVE-2022-45703 affect Binutils Readelf?
CVE-2022-45703 affects Binutils Readelf through the display_debug_section function in the readelf.c file.
What is the severity of CVE-2022-45703?
The severity of CVE-2022-45703 is high, with a CVSS score of 7.8.
Which software versions are affected by CVE-2022-45703?
Binutils Readelf versions before 2.40 are affected by CVE-2022-45703.
How can CVE-2022-45703 be fixed?
To fix CVE-2022-45703, upgrade to binutils readelf version 2.40 or later.