CVE-2022-4285

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

Score

CVSS 3.1 5.5 Medium

Status

Modified - secalert@redhat.com

Published

2023-01-27

Last modified

2025-03-28

Weaknesses

CWE-476

Affected products

• Fedora (Fedoraproject)
• Binutils (Gnu)
• Enterprise Linux (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• https://security.gentoo.org/glsa/202309-15
• https://sourceware.org/bugzilla/show_bug.cgi?id=29699
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70