CVE-2022-4285

medium

Description

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

References

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6aba1200353311e1a1f84c70

https://sourceware.org/bugzilla/show_bug.cgi?id=29699

https://security.gentoo.org/glsa/202309-15

https://bugzilla.redhat.com/show_bug.cgi?id=2150768

Details

Source: Mitre, NVD

Published: 2023-01-27

Updated: 2025-03-28

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:N/A:C

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H