CVE-2022-47007: Medium severity GNU binutils vulnerability
Published Aug 22, 2023
·Updated
An issue was discovered function stabdemanglev3arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.
Affected Software
5 affected componentsFixes available
GNU binutils>=2.34<=2.38
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils<2.38.50.20220627-1
2.38.50.20220627-1
debian/binutils
2.40-22.44-32.47.50.20261021-1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2Fixed in 2.44-3Fixed in 2.47.50.20261021-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.38.50.20220627-1
Event History
Aug 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via OSV·07:16 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-47007.
2
What is the affected software?
The affected software is GNU Binutils version 2.34 through 2.38.
3
What is the severity of CVE-2022-47007?
CVE-2022-47007 has a severity score of 5.5 (medium).
4
How does CVE-2022-47007 allow attackers to cause a denial of service?
CVE-2022-47007 allows attackers to cause a denial of service due to memory leaks.
5
Is there a reference for this vulnerability?
Yes, you can find the reference for CVE-2022-47007 at https://sourceware.org/bugzilla/show_bug.cgi?id=29254.