CVE-2022-47011

Published: Aug 22, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

Affected (1)

Products: Gnu: Binutils

Gnu

1 product

Binutils

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Binutils	From 2.34 to 2.38

Related CWEs

CWE-401

Missing Release of Memory after Effective Lifetime

The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.

References (2)

https://sourceware.org/bugzilla/show_bug.cgi?id=29261

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://sourceware.org/bugzilla/show_bug.cgi?id=29261

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.