PT-2023-5193 · Gnu+4 · Binutils+4

Publicado 2023-08-22 · Atualizado 2025-01-28 · CVE-2022-47673

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Binutils versions prior to 2.39.3

Description The issue is related to the parse module function in GNU Binutils, which is associated with out of bounds reads in memory. This can potentially allow an attacker to cause a denial of service or other unspecified impacts.

Recommendations For Binutils versions prior to 2.39.3, update to version 2.39.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the parse module function until a patch is available.

Exploit

Correção

DoS

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

ALT-PU-2024-9331

AZL-28585

AZL-28588

AZL-34636

BDU:2023-05786

CVE-2022-47673

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

ROSA-SA-2025-2645

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

Produtos afetados

Alt Linux

Astra Linux

Binutils

Debian

Suse

Referências · 65

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=29876 · Exploit
• https://bugzilla.suse.com/1206556 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20233695-1 · Nota
• https://bdu.fstec.ru/vul/2023-05786 · Nota de Segurança
• https://suse.com/security/cve/CVE-2023-2222 · Nota
• https://osv.dev/vulnerability/AZL-28585 · Aviso do Fabricante
• https://bugzilla.suse.com/1214565 · Nota
• https://osv.dev/vulnerability/AZL-28588 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2023-1972 · Nota
• https://bugzilla.suse.com/1214625 · Nota
• https://bugzilla.suse.com/1209642 · Nota
• https://suse.com/security/cve/CVE-2023-0687 · Nota
• https://suse.com/security/cve/CVE-2021-32256 · Nota
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE117 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2022-47673 · Aviso do Fabricante