CVE-2022-47695: High severity GNU binutils vulnerability
An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfdmachogetsyntheticsymtab in match-o.c.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.40-2Fixed in 2.44-3Fixed in 2.47.50.20261021-1 - Upgrade
Upgrade
debian/binutilsto a version that resolves this vulnerability.Fixed in 2.39.50.20221208-2 - Upgrade
Upgrade
Binutils objdumpto a version that resolves this vulnerability.Fixed in 2.39.3
Event History
Frequently Asked Questions
What is CVE-2022-47695?
CVE-2022-47695 is a vulnerability in Binutils objdump before version 2.39.3 that allows attackers to cause a denial of service or other unspecified impacts.
How does CVE-2022-47695 affect GNU Binutils?
CVE-2022-47695 affects GNU Binutils before version 2.39.3.
How does CVE-2022-47695 affect Ubuntu Binutils?
CVE-2022-47695 affects Ubuntu Binutils versions 2.30-21ubuntu1~18.04.9+ and 2.24-5ubuntu14.2+.
How does CVE-2022-47695 affect Debian Binutils?
CVE-2022-47695 affects Debian Binutils versions 2.31.1-16 to 2.35.2-2.
What is the severity of CVE-2022-47695?
The severity of CVE-2022-47695 is high, with a CVSS score of 7.8.
How can I fix the CVE-2022-47695 vulnerability?
To fix the CVE-2022-47695 vulnerability, update Binutils objdump to version 2.39.3 or later.