CVE-2022-4285

Description

An illegal memory access flaw was found in the binutils package. Parsing an ELF file containing corrupt symbol version information may result in a denial of service. This issue is the result of an incomplete fix for CVE-2020-16599.

Affected Platforms

Weakness Type

CWE-476

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• https://security.gentoo.org/glsa/202309-15
• https://sourceware.org/bugzilla/show_bug.cgi?id=29699
• https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git%3Bh=5c831a3c7f3ca98d6ab…
• https://bugzilla.redhat.com/show_bug.cgi?id=2150768
• https://security.gentoo.org/glsa/202309-15