Lucene search

K
redhatcveRedhat.comRH:CVE-2022-47696
HistoryAug 23, 2023 - 10:45 p.m.

CVE-2022-47696

2023-08-2322:45:30
redhat.com
access.redhat.com
22
cve-2022-47696
vulnerability
binutils
compare_symbols
crafted payload
denial of service
system availability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

A NULL pointer vulnerability was found in binutils in the ‘compare_symbols’ function. This flaw allows an attacker to craft a specific payload, possibly causing a denial of service that results in a loss of the system’s availability.

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%