CVE-2022-48064

MEDIUM

GNU Binutils < 2.40 - Denial of Service via bfd_dwarf2_find_nearest_line_with_alt

Title source: llm

Description

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

References (6)

Core 6

Core References

Patch

https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931

Third Party Advisory

https://security.netapp.com/advisory/ntap-20231006-0008/

Exploit, Issue Tracking, Third Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=29922

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/

Mailing List, Third Party Advisory vendor-advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/

Scores

CVSS v3 5.5

EPSS 0.0001

EPSS Percentile 1.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-770

Status published

Products (4)

fedoraproject/fedora 37

fedoraproject/fedora 38

gnu/binutils < 2.40

netapp/ontap_select_deploy_administration_utility

Published Aug 22, 2023

Tracked Since Feb 18, 2026