Denial of Service Vulnerability in Binutils by Free Software Foundation
CVE-2022-47010

5.5MEDIUM

Key Information:

Vendor
Gnu
Status
Binutils
Vendor
CVE Published:
22 August 2023

Summary

A denial of service vulnerability has been identified in Binutils, specifically in the pr_function_type function located in prdbg.c. This issue allows attackers to exploit memory leaks, potentially leading to service interruptions. Versions 2.34 through 2.38 are affected, highlighting the need for users to assess their systems and apply necessary updates to mitigate risks.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=29262

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.