PT-2023-13441 · Binutils+2 · Binutils+2

Hex Rabbit · Published 2023-08-22 · Updated 2024-06-15 · CVE-2022-35206

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Binutils readelf version 2.38.50

Description A null pointer dereference issue exists in the readelf component of Binutils, specifically in the function read and display attr value within the file dwarf.c. This issue can be triggered, potentially leading to a crash or other unintended behavior.

Recommendations For Binutils readelf version 2.38.50, consider applying a patch or update that fixes the null pointer dereference vulnerability in the read and display attr value function. As a temporary workaround, restrict the use of the read and display attr value function until a patch is available.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2022-35206

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

Affected Products

Binutils

Debian

Suse

References · 54

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=29290 · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2023:3825-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-35206 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3695-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13411-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35206 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2022-35206 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35206 · Vendor Advisory
• https://bugzilla.suse.com/1210733 · Note
• https://bugzilla.suse.com/1210297 · Note
• https://bugzilla.suse.com/1208037 · Note
• https://suse.com/security/cve/CVE-2022-47695 · Note
• https://suse.com/security/cve/CVE-2022-45703 · Note
• https://bugzilla.suse.com/1214579 · Note
• https://bugzilla.suse.com/1214611 · Note