PT-2023-5195 · Gnu+4 · Binutils+4

CVE-2022-47696 · Publicado 2023-08-22 · Atualizado 2025-01-28

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Binutils versions prior to 2.39.3

Description The issue is related to the compare symbols() function in objdump.c and is caused by incorrect clearing or release of resources. This can be exploited by an attacker to cause a denial of service or other unspecified impacts.

Recommendations For versions prior to 2.39.3, update to version 2.39.3 or later to resolve the issue. As a temporary workaround, consider disabling the compare symbols() function until a patch is available.

Exploit

Correção

DoS

Improper Resource Release

Resource Exhaustion

Enumeração de Fraquezas

CWE-404

CWE-400

Identificadores relacionados

ALT-PU-2024-9331

AZL-28503

AZL-28504

AZL-34635

BDU:2023-05799

CVE-2022-47696

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

ROSA-SA-2025-2645

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

Produtos afetados

Alt Linux

Astra Linux

Binutils

Debian

Suse

Referências · 66

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=29677 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE118 · Aviso do Fabricante
• https://bugzilla.suse.com/1206556 · Nota
• https://suse.com/support/update/announcement/2023/suse-su-20233695-1 · Nota
• https://cve.org/CVERecord?id=CVE-2022-47696 · Nota de Segurança
• https://suse.com/security/cve/CVE-2023-2222 · Nota
• https://bugzilla.suse.com/1214565 · Nota
• https://suse.com/security/cve/CVE-2023-1972 · Nota
• https://bugzilla.suse.com/1214625 · Nota
• https://bugzilla.suse.com/1209642 · Nota
• https://suse.com/security/cve/CVE-2023-0687 · Nota
• https://suse.com/security/cve/CVE-2021-32256 · Nota
• https://suse.com/security/cve/CVE-2022-48065 · Nota
• https://bugzilla.suse.com/1208038 · Nota
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Aviso do Fabricante