Lucene search

Ubuntu.comUB:CVE-2022-48064

HistoryAug 22, 2023 - 12:00 a.m.

CVE-2022-48064

2023-08-2200:00:00

ubuntu.com

cve-2022-48064; elf file; dns attack; memory consumption; security issue; nm inspection tool; memory leak; gnu binutils v2.40; excessive.

0.0005 Low

EPSS

Percentile

16.4%

JSON

GNU Binutils before 2.40 was discovered to contain an excessive memory
consumption vulnerability via the function
bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could
supply a crafted ELF file and cause a DNS attack.

Bugs

<https://sourceware.org/bugzilla/show_bug.cgi?id=29922>

Notes

Author	Note
seth-arnold	binutils isn’t safe for untrusted inputs.
ccdm94	upstream does not consider this a security issue, as per their binutils/SECURITY.txt security file. That is because this issue affects nm, an inspection tool. For bionic and earlier, the patch seems to introduce a memory leak, so these releases will be marked as ignored.

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchbinutils< anyUNKNOWN
ubuntu22.04noarchbinutils< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	binutils	< any	UNKNOWN
ubuntu	22.04	noarch	binutils	< any	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2022-48064

nvd.nist.gov/vuln/detail/CVE-2022-48064

security-tracker.debian.org/tracker/CVE-2022-48064

www.cve.org/CVERecord?id=CVE-2022-48064

0.0005 Low

EPSS

Percentile

16.4%

JSON

Related for UB:CVE-2022-48064