PT-2023-5193 · Gnu+4 · Binutils+4

Published 2023-08-22 · Updated 2025-01-28 · CVE-2022-47673

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Binutils versions prior to 2.39.3

Description The issue is related to the parse module function in GNU Binutils, which is associated with out of bounds reads in memory. This can potentially allow an attacker to cause a denial of service or other unspecified impacts.

Recommendations For Binutils versions prior to 2.39.3, update to version 2.39.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the parse module function until a patch is available.

Exploit

Fix

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2024-9331

AZL-28585

AZL-28588

AZL-34636

BDU:2023-05786

CVE-2022-47673

OPENSUSE-SU-2023_3825-1

OPENSUSE-SU-2024:13411-1

ROSA-SA-2025-2645

SUSE-SU-2023:3695-1

SUSE-SU-2023:3825-1

Affected Products

Alt Linux

Astra Linux

Binutils

Debian

Suse

References · 65

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=29876 · Exploit
• https://bdu.fstec.ru/vul/2023-05786 · Security Note
• https://osv.dev/vulnerability/AZL-28585 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-28588 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE117 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-47673 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47673 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3695-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-47673 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:13411-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-47673 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3825-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-47673 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-47673 · Security Note