CVE-2022-47695

2023-08-2219:16:30

Google

osv.dev

binutils

objdump

2.39.3

denial of service

vulnerability

match-o.c

bfd_mach_o_get_synthetic_symtab

software.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.

CPENameOperatorVersion
binutilseq2.33.50.20200111-1
binutilseq2.36.1-5
binutilseq2.41.50.20231202-1
binutilseq2.33.90.20200122-1
binutilseq2.38.50.20220615-3
binutilseq2.40.50.20230602-1
binutilseq2.33-1
binutilseq2.38.50.20220609-1
binutilseq2.33.1-4
binutilseq2.38.90.20220713-1

Name	Operator	Version
binutils	eq	2.33.50.20200111-1
binutils	eq	2.36.1-5
binutils	eq	2.41.50.20231202-1
binutils	eq	2.33.90.20200122-1
binutils	eq	2.38.50.20220615-3
binutils	eq	2.40.50.20230602-1
binutils	eq	2.33-1
binutils	eq	2.38.50.20220609-1
binutils	eq	2.33.1-4
binutils	eq	2.38.90.20220713-1