The vulnerability of the GNU Binutils development tool, related to the handling of zero pointers, allows an attacker to execute a type of attack known as a “Denial-of-Service” (DoS) attack.

🗓️ 06 Feb 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 3 Views

GNU Binutils memory flaw with zero pointers may cause DoS on ELF files with corrupted symbol version info.

Reporter	Title	Published	Views	Family All 151
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.4-IF001	29 Nov 202320:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.6.4 fixes multiple security vulnerabilities	15 Dec 202314:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to denial of service in GNU Binutils [CVE-2022-4285]	25 Apr 202418:25	–	ibm
Tenable Nessus	Alibaba Cloud Linux 3 : 0086: gcc-toolset-12-binutils (ALINUX3-SA-2023:0086)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : gcc-toolset-12-binutils (ALSA-2023:2873)	20 May 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : binutils (ALSA-2023:6236)	6 Nov 202300:00	–	nessus
Tenable Nessus	CentOS 8 : binutils (CESA-2023:6236)	8 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 9 : gcc-toolset-13-binutils-2.40-8.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	CentOS 9 : mingw-binutils-2.40-3.el9	29 Feb 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP11 : binutils (EulerOS-SA-2023-1755)	8 May 202300:00	–	nessus

Vulners

Node

gnu_general_public_license gnu_binutilsRange<2.39-7

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
sourceware	www.sourceware.org/git/gitweb.cgi
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
access	www.access.redhat.com/security/cve/CVE-2022-4285
security-tracker	www.security-tracker.debian.org/tracker/CVE-2022-4285
goslinux	www.goslinux.fssp.gov.ru/2726972/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2645
altsp	www.altsp.su/obnovleniya-bezopasnosti/
web	www.web.nvd.nist.gov/view/vuln/detail

14 Oct 2025 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 24.9

CVSS 35.5

EPSS0.00437

GNU Binutils memory flaw zero pointers denial of service elf files symbol version info