cbcvebase.
CVE-2022-35206
published 2023-08-22

CVE-2022-35206: Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.

PriorityP417medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.30%
22.0th percentile
Null pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.

Affected

5 ranges
VendorProductVersion rangeFixed in
debianbinutils< binutils 2.38.50.20220627-1 (bookworm)binutils 2.38.50.20220627-1 (bookworm)
gnubinutils——
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1
gnubinutils>= 0 < 2.38.50.20220627-12.38.50.20220627-1

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5LOW
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.