cbcvebase.
CVE-2022-35205
published 2023-08-22

CVE-2022-35205: An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.

medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
An issue was discovered in Binutils readelf 2.38.50, reachable assertion failure in function display_debug_names allows attackers to cause a denial of service.

Affected

14 ranges
VendorProductVersion rangeFixed in
debianbinutils< binutils 2.38.50.20220627-1 (bookworm)binutils 2.38.50.20220627-1 (bookworm)
gnubinutils
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1
gnubinutils>= 0 < 2.34-6ubuntu1.72.34-6ubuntu1.7
gnubinutils>= 0 < 2.38-4ubuntu2.42.38-4ubuntu2.4
gnubinutils>= 0 < 2.24-5ubuntu14.2+esm62.24-5ubuntu14.2+esm6
gnubinutils>= 0 < 2.24-5ubuntu14.2+esm52.24-5ubuntu14.2+esm5
gnubinutils>= 0 < 2.26.1-1ubuntu1~16.04.8+esm92.26.1-1ubuntu1~16.04.8+esm9
gnubinutils>= 0 < 2.30-21ubuntu1~18.04.9+esm32.30-21ubuntu1~18.04.9+esm3
msrccbl2_binutils_2.37-10_on_cbl_mariner_2.0
msrccbl_mariner_2.0_arm
msrccbl_mariner_2.0_x64

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv8.8HIGH