CVE-2022-48064

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function bfd_dwarf2_find_nearest_line_with_alt at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
gnubinutils
𝑥
< 2.40
netappontap_select_deploy_administration_utility
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
binutils
bookworm
2.40-2
fixed
bullseye
unimportant
sid
2.43.1-5
fixed
trixie
2.43.1-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
binutils
bionic
ignored
focal
needed
jammy
needed
lunar
not-affected
mantic
not-affected
noble
not-affected
trusty
ignored
xenial
ignored
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
binutils
suse enterprise desktop 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise sap 12 SP5
2.41-9.53.1
fixed
suse enterprise sap 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise server 12 SP3
2.41-9.53.1
fixed
suse enterprise server 12 SP5
2.41-9.53.1
fixed
suse enterprise server 15 SP1
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP7
2.41-150100.7.46.1
fixed
binutils-devel
suse enterprise desktop 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise sap 12 SP5
2.41-9.53.1
fixed
suse enterprise sap 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise server 12 SP3
2.41-9.53.1
fixed
suse enterprise server 12 SP5
2.41-9.53.1
fixed
suse enterprise server 15 SP1
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP7
2.41-150100.7.46.1
fixed
binutils-devel-32bit
suse enterprise desktop 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP1
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP7
2.41-150100.7.46.1
fixed
gdb
suse enterprise desktop 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise desktop 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise desktop 15 SP7
14.2-150400.15.20.1
fixed
suse enterprise sap 12 SP5
13.2-2.23.1
fixed
suse enterprise sap 15 SP2
14.2-150100.8.45.1
fixed
suse enterprise sap 15 SP3
14.2-150100.8.45.1
fixed
suse enterprise sap 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise sap 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise sap 15 SP7
14.2-150400.15.20.1
fixed
suse enterprise server 12 SP3
13.2-2.23.1
fixed
suse enterprise server 12 SP5
13.2-2.23.1
fixed
suse enterprise server 15 SP2
14.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
14.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
14.2-150400.15.20.1
fixed
suse enterprise server 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise server 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise server 15 SP7
14.2-150400.15.20.1
fixed
gdbserver
suse enterprise desktop 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise desktop 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise desktop 15 SP7
14.2-150400.15.20.1
fixed
suse enterprise sap 15 SP2
14.2-150100.8.45.1
fixed
suse enterprise sap 15 SP3
14.2-150100.8.45.1
fixed
suse enterprise sap 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise sap 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise sap 15 SP7
14.2-150400.15.20.1
fixed
suse enterprise server 15 SP2
14.2-150100.8.45.1
fixed
suse enterprise server 15 SP3
14.2-150100.8.45.1
fixed
suse enterprise server 15 SP4
14.2-150400.15.20.1
fixed
suse enterprise server 15 SP5
14.2-150400.15.20.1
fixed
suse enterprise server 15 SP6
13.2-150400.15.14.1
fixed
suse enterprise server 15 SP7
14.2-150400.15.20.1
fixed
libctf-nobfd0
suse enterprise desktop 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise sap 12 SP5
2.41-9.53.1
fixed
suse enterprise sap 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise server 12 SP3
2.41-9.53.1
fixed
suse enterprise server 12 SP5
2.41-9.53.1
fixed
suse enterprise server 15 SP1
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP7
2.41-150100.7.46.1
fixed
libctf0
suse enterprise desktop 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise desktop 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise sap 12 SP5
2.41-9.53.1
fixed
suse enterprise sap 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise sap 15 SP7
2.41-150100.7.46.1
fixed
suse enterprise server 12 SP3
2.41-9.53.1
fixed
suse enterprise server 12 SP5
2.41-9.53.1
fixed
suse enterprise server 15 SP1
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP2
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP3
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP4
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP5
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP6
2.41-150100.7.46.1
fixed
suse enterprise server 15 SP7
2.41-150100.7.46.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
binutils
Amazon Linux 2
0:2.29.1-31.amzn2.0.1
fixed
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
binutils-debuginfo
Amazon Linux 2
0:2.29.1-31.amzn2.0.1
fixed
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
binutils-debugsource
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
binutils-devel
Amazon Linux 2
0:2.29.1-31.amzn2.0.1
fixed
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
binutils-gprofng
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
binutils-gprofng-debuginfo
Amazon Linux 2023
0:2.39-6.amzn2023.0.9
fixed
Azure Linux logo
Azure Linux Releases
Azure Package
Release
gdb
CBL-Mariner 2.0
0:11.2-5.cm2
fixed
Common Weakness Enumeration
References
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/
https://security.netapp.com/advisory/ntap-20231006-0008/
https://sourceware.org/bugzilla/show_bug.cgi?id=29922
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3XKYUAIORNQ32IZUOZFURECZKEXOHX7Z/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KGSKF4GH7425S6XFDQMWTJGD5U47BAZN/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NSUNHSOWWLLNGHRM5TUBNCJHEYHPDX2M/
https://security.netapp.com/advisory/ntap-20231006-0008/
https://sourceware.org/bugzilla/show_bug.cgi?id=29922
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=8f2c64de86bc3d7556121fe296dd679000283931