CVE-2022-47010

2023-08-2200:00:00

ubuntu.com

cve-2022-47010

binutils

prdbg.c

denial of service

memory leaks

bugzilla

seth-arnold

launchpad

untrusted inputs

unix

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.4%

JSON

An issue was discovered function pr_function_type in prdbg.c in Binutils
2.34 thru 2.38, allows attackers to cause a denial of service due to memory
leaks.

Bugs

<https://sourceware.org/bugzilla/show_bug.cgi?id=29262>

Notes

Author	Note
seth-arnold	binutils isn’t safe for untrusted inputs.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchbinutils< 2.30-21ubuntu1~18.04.9+esm3UNKNOWN
ubuntu20.04noarchbinutils< 2.34-6ubuntu1.8UNKNOWN
ubuntu22.04noarchbinutils< 2.38-4ubuntu2.5UNKNOWN
ubuntu14.04noarchbinutils< 2.24-5ubuntu14.2+esm5UNKNOWN
ubuntu16.04noarchbinutils< 2.26.1-1ubuntu1~16.04.8+esm9UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	18.04	noarch	binutils	< 2.30-21ubuntu1~18.04.9+esm3	UNKNOWN
ubuntu	20.04	noarch	binutils	< 2.34-6ubuntu1.8	UNKNOWN
ubuntu	22.04	noarch	binutils	< 2.38-4ubuntu2.5	UNKNOWN
ubuntu	14.04	noarch	binutils	< 2.24-5ubuntu14.2+esm5	UNKNOWN
ubuntu	16.04	noarch	binutils	< 2.26.1-1ubuntu1~16.04.8+esm9	UNKNOWN