Excessive Memory Consumption in GNU Binutils Affecting Security Functionality
CVE-2022-48064

5.5MEDIUM

Key Information:

Vendor
Gnu
Status
Binutils
Vendor
CVE Published:
22 August 2023

Summary

An excessive memory consumption vulnerability exists in GNU Binutils prior to version 2.40, stemming from the function bfd_dwarf2_find_nearest_line_with_alt in dwarf2.c. Successfully exploiting this vulnerability requires an attacker to provide a specially crafted ELF file, potentially leading to a disruption of services through a DNS attack. Users are advised to upgrade to the latest version to mitigate this risk.

References

https://sourceware.org/bugzilla/show_bug.cgi?id=29922
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%...
https://lists.fedoraproject.org/archives/list/package-ann...
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.