Heap Buffer Overflow in Readelf Tool from GNU Binutils
CVE-2022-45703

7.8HIGH

Key Information:

Vendor

Gnu
Status
Binutils
Vendor
CVE Published:
22 August 2023

What is CVE-2022-45703?

A heap buffer overflow vulnerability exists in the readelf utility of GNU Binutils prior to version 2.40. This issue is caused by improper handling in the display_debug_section function within the readelf.c source file. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service on affected systems, thereby compromising the security of applications using the binutils suite.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=29799
https://security.netapp.com/advisory/ntap-20231006-0003/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.