PT-2023-6123 · Binutils+6 · Binutils+6

Yuxuan He · Published 2023-08-22 · Updated 2025-01-28 · CVE-2022-47007

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Binutils versions 2.34 through 2.38

Description The issue is related to the stab demangle v3 arg function in stabs.c and is associated with memory leaks. Exploitation of this issue can allow an attacker to cause a denial of service.

Recommendations For Binutils versions 2.34 through 2.38, consider disabling the stab demangle v3 arg function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALT-PU-2024-9331

AZL-28045

BDU:2023-06829

CVE-2022-47007

ROSA-SA-2025-2645

USN-6413-1

USN-6581-1

Affected Products

Alt Linux

Astra Linux

Binutils

Debian

Linuxmint

Red Os

Ubuntu

References · 35

• 🔥 https://sourceware.org/bugzilla/show_bug.cgi?id=29254 · Exploit
• https://ubuntu.com/security/CVE-2022-44840 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-47011 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6413-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-47007 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6413-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6581-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-47007 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-47007 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-47007 · Security Note
• https://ubuntu.com/security/CVE-2018-6543 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8421 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-35205 · Vendor Advisory