← Database

CVE-2022-48063

MEDIUM CVSS: 5.5 Published: 2023-08-22 Modified: 2026-06-17

Description

GNU Binutils before 2.40 was discovered to contain an excessive memory consumption vulnerability via the function load_separate_debug_files at dwarf2.c. The attacker could supply a crafted ELF file and cause a DNS attack.

Affected Platforms

Gnu Binutils

Weakness Type

CWE-400

References